Improper Authorization

🗓️ 29 Sep 2022 06:46:55Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 22 Views

github.com/goharbor/harbor is vulnerable to improper authorization. A remote authenticated attacker is able to gain access to unauthorized projects due to improper validation of the user permissions when updating tag immutability policies

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-31669	14 Nov 202411:53	–	circl
CNNVD	Harbor 授权问题漏洞	14 Nov 202400:00	–	cnnvd
CVE	CVE-2022-31669	14 Nov 202411:48	–	cve
Cvelist	CVE-2022-31669 Harbor fails to validate the user permissions when updating tag immutability policies	14 Nov 202411:48	–	cvelist
EUVD	EUVD-2022-6741	3 Oct 202520:07	–	euvd
Github Security Blog	Harbor fails to validate the user permissions when updating tag immutability policies	16 Sep 202219:38	–	github
NVD	CVE-2022-31669	14 Nov 202412:15	–	nvd
OSV	BIT-HARBOR-2022-31669 Harbor fails to validate the user permissions when updating tag immutability policies	20 Nov 202407:10	–	osv
OSV	GHSA-8C6P-V837-77F6 Harbor fails to validate the user permissions when updating tag immutability policies	16 Sep 202219:38	–	osv
Positive Technologies	PT-2022-20881 · Harbor · Harbor	16 Sep 202200:00	–	ptsecurity

Vulners

Node

goharbor github.com/goharbor/harborRangev2.5.0-rc1–2.5.0-rc1go

goharbor github.com/goharbor/harborRangev2.3.0-rc1–2.3.0-rc1go

Source	Link
github	www.github.com/goharbor/harbor/pull/17239
github	www.github.com/goharbor/harbor/commit/38cc18471d4d839769778ce6c63858a38c4b7459
github	www.github.com/goharbor/harbor/pull/17058
github	www.github.com/goharbor/harbor/commit/ce18afaf8bb51e87de21d5a20147f536e7295037
github	www.github.com/advisories/GHSA-8c6p-v837-77f6
github	www.github.com/goharbor/harbor/security/advisories/GHSA-8c6p-v837-77f6

29 Sep 2022 09:04Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.16.4 - 7.7

EPSS0.00066