Lucene search
Veracode Vulnerability DatabaseVERACODE:29248HistoryFeb 03, 2021 - 12:40 p.m.
Authorization Bypass
2021-02-0312:40:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
35.9%
github.com/goharbor/harbor is vulnerable to authorization bypass. An attacker is able to gain unauthorized access to the catalog’s registry v2 API by using the path GET /v2/_catalog/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/goharbor/harbor | le | v2.1.2 |
Related
cve
cve
CVE-2020-29662
2021-02-02 21:15:13
osv
osv
BIT-harbor-2020-29662
2024-03-06 10:53:37
CVE-2020-29662
2021-02-02 21:15:13
"catalog's registry v2 api exposed on unauthenticated path in Harbor"
2022-02-12 00:01:51
prion
prion
Path traversal
2021-02-02 21:15:00
nvd
nvd
CVE-2020-29662
2021-02-02 21:15:13
cvelist
cvelist
CVE-2020-29662
2021-02-02 20:54:33
github
github
"catalog's registry v2 api exposed on unauthenticated path in Harbor"
2022-02-12 00:01:51
nessus
nessus
VMware Harbor Information Disclosure (CVE-2020-29662)
2021-08-05 00:00:00