SUSE CVE-2020-13794

Harbor 1.9. 1.10. and 2.0. allows Exposure of Sensitive Information to an Unauthorized Actor...

VMware Harbor User Enumeration (CVE-2020-13794)

Binary data vmwareharborCVE-2020-13794direct.nbin...

CVE-2020-13794

CVE-2020-13794 affects Harbor 1.9., 1.10. and 2.0.*, enabling exposure of sensitive information via user enumeration. Publicly cited detail shows an authenticated user can enumerate usernames via the /api/users/search endpoint (curl example and _ parameter usage), bypassing admin restrictions. Th...