Lucene search
RedhatVULNRICHMENT:CVE-2024-3624HistoryApr 25, 2024 - 5:46 p.m.
CVE-2024-3624 Mirror-registry: database user and password stored in plain-text
2024-04-2517:46:52
CWE-256
redhat
github.com
plain-text storage
database security
quay's mirror-registry
CVSS3
7.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
A flaw was found in how Quay’s database is stored in plain-text in mirror-registry on the jinja’s config.yaml file. This flaw allows a malicious actor with access to this file to gain access to Quay’s database.
Related
nvd
nvd
CVE-2024-3624
2024-04-25 18:15:10
redhatcve
redhatcve
CVE-2024-3624
2024-04-10 21:22:36
cve
cve
CVE-2024-3624
2024-04-25 18:15:10
cvelist
cvelist
CVSS3
7.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-3624