Harbor <=2.5.3 - Unauthorized Access

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication id: CVE-2022-46463 info: name: Harbor =2.5.3 - Unauthorized Access author: Arm!tage severity: high description: | An access control issue in Harbor v1.X.X to...

CVE-2022-46463

creationtimestamp| type| source ---|---|--- 2023-01-18 06:02:47+00:00| seen| https://t.me/proxybar/1301 2023-01-19 00:11:07+00:00| published-proof-of-concept| Telegram/0NZCYVlx7ylV75kO7UU3TIiJIkgGwrPNwLxvKLb7GodpuQ 2023-01-19 00:11:25+00:00| published-proof-of-concept|...

CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."...

CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."...

CVE-2022-46463

CVE-2022-46463 describes an access-control issue in Harbor where Harbor v1.X.X through v2.5.3 allows access to both public and private image repositories without authentication. The vulnerability is described consistently across NVD/OSV/Nuclei sources as an unauthorized access flaw (CWE-306) with...