NetSight
medium5.3

CVE-2019-19030

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP …

Impact

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists.

Affected products

VendorProductAffected versions
LinuxfoundationHarbor
before 1.10.3
from 2.0.0 before 2.0.1

Weakness classification

References