630 matches found
VMware Harbor Container Registry for Pivotal Platform Elevation of Privilege Vulnerability
VMware Harbor Container Registry for Pivotal Platform is a product of VMware. An elevation of privilege vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.9 prior to 1.9.3 and version 1.8 prior to 1.8.6. The vulnerability can be exploited to reset passwords an...
Information Disclosure
github.com/goharbor/harbor is vulnerable to information disclosure. The vulnerability exists as it was possible to enumerate users with the /api/users/search endpoint...
VMware Harbor Container Registry for Pivotal Platform SQL Injection Vulnerability
VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A SQL injection vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a database-based application that lacks...
Harbor User Enumeration Vulnerability
Harbor is an open source trusted cloud native registry. The product is primarily used to store, sign and scan container images for vulnerabilities. A security vulnerability exists in the '/users' API endpoint in Harbor. An attacker could use the vulnerability to bypass restrictions on this endpoi...
VMware Harbor Container Registry for Pivotal Platform Cross-Site Request Forgery Vulnerability
VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A cross-site request forgery vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a web application that does...
CVE-2019-3990
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
CVE-2019-3990
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
Design/Logic Flaw
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
CVE-2019-3990
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality...
CVE-2019-3990
Affected product: Harbor (Open Source Harbor registry). Vulnerability: User enumeration via the "/users" API endpoint, which should be administrator-restricted, can be bypassed. Information about registered users can be obtained through the "+search" functionality. Root cause / nature (as describ...
Harbor Local Detection
Binary data cncfharborlocaldetect.nbin...
VMware Harbor 1.8.x < 1.8.4 (VMSA-2019-0016)
The version of VMware Harbor installed on the remote host is 1.8.x prior to 1.8.4. It is, therefore, affected by a broken access control vulnerability due to a failure to enforce proper project permissions and project scope on the API request to create a new robot account. This vulnerability allo...
CVE-2019-16919
Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access or control for. The Harbor API did not enforce the proper...
CVE-2019-16919
Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access or control for. The Harbor API did not enforce the proper...
Insecure Default
Overview github.com/goharbor/harbor/src/core/api is a cloud native registry project that stores, signs, and scans content. Affected versions of this package are vulnerable to Insecure Default. Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to...
Improper access control
Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access or control for. The Harbor API did not enforce the proper...
CVE-2019-16919
Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or pull access permissions to a project they don't have access or control for. The Harbor API did not enforce the proper...
CVE-2019-16919
Harbor/CNCF Harbor API contains a Broken Access Control vulnerability (CVE-2019-16919). It can allow a project administrator to create a robot account with unauthorized push/pull permissions in a project they should not control. Affected components include Harbor API within Harbor Container Regis...
Authentication Bypass
github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...