Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hc7v-pwgp-8mp6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

EPSS

Процентиль: 30%
0.00109
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 6
redhat
больше 6 лет назад

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

CVSS3: 6.3
nvd
около 6 лет назад

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

CVSS3: 6.3
fstec
около 6 лет назад

Уязвимость реестра контейнернов Red Hat Quay, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю снять защиту контейнера

EPSS

Процентиль: 30%
0.00109
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-522