Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-87rm-wvwv-5r67

Опубликовано: 25 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file. This issue leaves the possibility of a malicious actor with access to this file to gain access to Quay's Redis instance.

A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file. This issue leaves the possibility of a malicious actor with access to this file to gain access to Quay's Redis instance.

EPSS

Процентиль: 11%
0.00037
Низкий

7.3 High

CVSS3

Дефекты

CWE-256

Связанные уязвимости

CVSS3: 7.3
redhat
почти 2 года назад

A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file. This issue leaves the possibility of a malicious actor with access to this file to gain access to Quay's Redis instance.

CVSS3: 7.3
nvd
почти 2 года назад

A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file. This issue leaves the possibility of a malicious actor with access to this file to gain access to Quay's Redis instance.

CVSS3: 7.3
fstec
почти 2 года назад

Уязвимость программного средства создания локальных копий удаленного реестра образов контейнеров Mirror registry for Red Hat OpenShift, связанная с незашифрованным хранением критичной информации, позволяющая нарушителю получить несанкционированный доступ к экземпляру Redis Quay

EPSS

Процентиль: 11%
0.00037
Низкий

7.3 High

CVSS3

Дефекты

CWE-256