Lucene search

K
zdiAlfredo Oliveira and Nitesh Surana (@_niteshsurana) of Trend Micro ResearchZDI-24-580
HistoryJun 06, 2024 - 12:00 a.m.

Microsoft Artifact Registry Container Images Empty Password Authentication Bypass Vulnerability

2024-06-0600:00:00
Alfredo Oliveira and Nitesh Surana (@_niteshsurana) of Trend Micro Research
www.zerodayinitiative.com
1
microsoft
artifact registry
container images
vulnerability
authentication bypass
empty password

7.2 High

AI Score

Confidence

Low

This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft Artifact Registry Container images. Authentication is not required to exploit this vulnerability. The specific flaw exists within the default credentials set within the image. The issue results from the use of empty root password. An attacker can leverage this vulnerability to bypass authentication on the system.

7.2 High

AI Score

Confidence

Low