Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
Docker patched a critical two-year Docker Hub flaw that could let one user push images as another, with no known exploitation.
1
Stories per day · 30 days
1 RSS
3 stories, newest first · one card per story
Stories tagged #container-registry
We got admin access to Baseten's production GitHub in 25 minutes
Strix autonomous hacking agent extracted a working GitHub token with repo admin rights from Baseten's public Harbor image; Baseten rotated it next day.
3
Identifying a BOLA Vulnerability in Harbor, a Cloud
Unit 42 found a BOLA flaw, CVE-2024-22278 (CVSS 6.4), letting Maintainers improperly alter Harbor project metadata; fixed in versions 2.9.5, 2.10.3, and 2.11.0.