CVE-2019-19026

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform...

CVE-2019-19026

CVE-2019-19026 affects Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3, where a SQL Injection vulnerability can be exploited via project quotas in the VMware Harbor Container Registry for the Pivotal Platform. Root cause: handling of project quotas allows injection attempts. Imp...

CVE-2019-19025

CVE-2019-19025 affects Cloud Native Computing Foundation Harbor prior to versions 1.8.6 and 1.9.3, where the Harbor web interface is vulnerable to Cross-site Request Forgery (CSRF) in the VMware Harbor Container Registry for the Pivotal Platform. The root cause is CSRF protection gaps in the Harb...

CVE-2019-19025

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform...

CVE-2019-19029: Improper Neutralization of Special Elements used in an SQL Command

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform...

PT-2020-10037 · Cloud Native Computing Foundation +1 · Harbor +1

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform. This is a result of a flaw in the Cloud...

CVE-2019-19023: Undefined Security Weakness

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform...

CVE-2019-19025: Cross-Site Request Forgery (CSRF)

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform...

PT-2020-10036 · Cloud Native Computing Foundation +1 · Harbor +1

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform. This is a problem related to the...

CVE-2019-19026: Improper Neutralization of Special Elements used in an SQL Command

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform...

PT-2020-10035 · Cloud Native Computing Foundation +1 · Harbor +1

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue is related to a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform. This vulnerability affects...

PT-2020-5956 · Cloud Native Computing Foundation · Harbor

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue is related to Cross-Site Request Forgery CSRF in the Harbor web interface, which does not implement protection mechanisms against such attacks...

Harbor Container Registry Privilege Escalation (CVE-2019-16097)

A Privilege Escalation vulnerability exists in Harbor Container Registry. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

SQL Injection

github.com/goharbor/harbor is vulnerable to SQL injection. A user with Project-Admin capabilities is able to inject and execute arbitrary SQL statements to read secrets from the underlying database or perform privilege escalation attacks...

SQL Injection

github.com/goharbor/harbor is vulnerable to SQL injection. The vulnerability exists as it was possible for an authenticated administrator to send a SQL payload through the sort GET parameter in the project quotas section...

VMware Harbor 1.7.x, 1.8.x < 1.8.6 / 1.9.x < 1.9.3

The version of VMware Harbor installed on the remote host is 1.7.x or 1.8.x prior to 1.8.6 or 1.9.x prior to 1.9.3. It is, therefore, affected multiple vulnerabilities, including the following: - A privilege escalation vulnerability that allows an authenticated, normal user to gain administrative...

The vulnerability of the Docker container Harbor registry, related to errors in the use of standard permissions, allows attackers to increase their privileges and gain unauthorized access to adjacent projects.

The vulnerability of the Docker container Harbor registry is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges and gain unauthorized access to adjacent projects...

VMware Harbor Container Registry for Pivotal Platform Elevation of Privilege Vulnerability

VMware Harbor Container Registry for Pivotal Platform is a product of VMware. An elevation of privilege vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.9 prior to 1.9.3 and version 1.8 prior to 1.8.6. The vulnerability can be exploited to reset passwords an...

Information Disclosure

github.com/goharbor/harbor is vulnerable to information disclosure. The vulnerability exists as it was possible to enumerate users with the /api/users/search endpoint...

VMware Harbor Container Registry for Pivotal Platform SQL Injection Vulnerability

VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A SQL injection vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a database-based application that lacks...