high7.5
CVE-2022-46463
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication.
Impact
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Harbor | from 1.1.0 through 2.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Vad1mo
- https://github.com/lanqingaa/123/blob/main/README.md
- https://github.com/lanqingaa/123/tree/bb48caa844d88b0e41e69157f2a2734311abf02d
- https://github.com/Vad1mo
- https://github.com/lanqingaa/123/blob/main/README.md
- https://github.com/lanqingaa/123/tree/bb48caa844d88b0e41e69157f2a2734311abf02d