Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:9 a.m.13 views

CVE-2019-19030

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal via the HTTP status code whether a resource exists...

5.3CVSS6.9AI score0.01891EPSS
Exploits1References1
OSV
OSV
added 2024/08/21 3:21 p.m.34 views

GO-2022-0704 Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

Unauthenticated users can exploit an enumeration vulnerability in Harbor CVE-2019-19030 in github.com/goharbor/harbor...

5.3CVSS5.2AI score0.01891EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2022/12/26 12:0 a.m.10 views

CVE-2019-19030

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal via the HTTP status code whether a resource exists...

5.7AI score0.01891EPSS
Exploits1References1
CVE
CVE
added 2022/12/26 12:0 a.m.107 views

CVE-2019-19030

The CVE-2019-19030 issue affects Harbor (Cloud Native Computing Foundation Harbor) prior to 1.10.3 and 2.x prior to 2.0.1. Root cause: unauthenticated API calls allow resource existence checks, enabling resource enumeration via HTTP status responses. Impact: information disclosure by revealing wh...

5.3CVSS5.2AI score0.01891EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/02/11 11:17 p.m.79 views

GHSA-Q9X4-Q76F-5H5J Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

Impact Sean Wright from Secureworks has discovered an enumeration vulnerability. An attacker can make use of the Harbor API to make unauthenticated calls to the Harbor instance. Based on the HTTP status code in the response, an attacker is then able to work out which resources exist, and which do...

5.3CVSS5.3AI score0.01891EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/02/11 11:17 p.m.48 views

Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

Impact Sean Wright from Secureworks has discovered an enumeration vulnerability. An attacker can make use of the Harbor API to make unauthenticated calls to the Harbor instance. Based on the HTTP status code in the response, an attacker is then able to work out which resources exist, and which do...

5.3CVSS0.6AI score0.01891EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/10 12:0 a.m.71 views

VMware Harbor Information Disclosure (CVE-2019-19030)

Binary data vmwareharborCVE-2019-19030.nbin...

5.3CVSS5.3AI score0.01891EPSS
Exploits1References2
Rows per page
Query Builder