Описание
regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.
A flaw was found in regclient. This issue can allow a malicious registry to return a different digest for a pinned manifest without detection via manipulated manifest responses.
Меры по смягчению последствий
Red Hat Product Security has not identified any applicable mitigations at this time.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Trusted Profile Analyzer | trusted-content-tenant/trustification-guac | Affected | ||
| Red Hat Trusted Profile Analyzer | /trustification-guac | Affected |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
5.2 Medium
CVSS3
Связанные уязвимости
regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned manifest without detection. This vulnerability is fixed in 0.7.1.
regclient is a Docker and OCI Registry Client in Go. A malicious regis ...
In regclient, pinned manifest digests may be ignored
5.2 Medium
CVSS3