Логотип exploitDog
bind:CVE-2024-3623
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-3623

Количество 4

Количество 4

redhat логотип

CVE-2024-3623

почти 2 года назад

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2024-3623

почти 2 года назад

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-frqc-23qh-4rq8

почти 2 года назад

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 8.1
EPSS: Низкий
fstec логотип

BDU:2024-03903

почти 2 года назад

Уязвимость программного средства создания локальных копий удаленного реестра образов контейнеров Mirror registry for Red Hat OpenShift, связанная с незашифрованным хранением критичной информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2024-3623

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 8.1
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-3623

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-frqc-23qh-4rq8

A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database.

CVSS3: 8.1
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-03903

Уязвимость программного средства создания локальных копий удаленного реестра образов контейнеров Mirror registry for Red Hat OpenShift, связанная с незашифрованным хранением критичной информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 8.1
0%
Низкий
почти 2 года назад

Уязвимостей на страницу