Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

High severity vulnerabilities found in Harbor open-source artifact registry

Help Net Securityby @helpnetsecurity ()2 min read2
Read at helpnetsecurity.com
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
CVEs
CVE-2022-31671CVE-2022-31666CVE-2022-31670CVE-2022-31669CVE-2022-31667
Tags
cve-2022-31671cve-2022-31666cve-2022-31670cve-2022-31669cve-2022-31667vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-31670
+4 related CVEs
CVE-2022-31669CVE-2022-31671CVE-2022-31667CVE-2022-31666
Harbor fails to validate the user permissions when updating tag retention policies
7.7
group max
<1%

From the original article

2 min read at helpnetsecurity.com

Oxeye security researchers have uncovered several new high severity variants of the IDOR (Insecure Director Object Reference) vulnerabilities (CVE-2022-31671, CVE-2022-31666, CVE-2022-31670, CVE-2022-31669, CVE-2022-31667) in CNCF-graduated project Harbor, the popular open-source artifact registry by VMware. Harbor is an open-source cloud native registry project that stores, signs, and scans content.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.