Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Quay ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Product
Red Hat Quay ist eine verteilte und hochverfügbare Container Image Registry.
Vulnerabilities 1
-
Medium 4.2
Quay: unauthorized user may authenticate via oauth application token
A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to authenticate despite not having access to the organization from which the application was created. This issue is limited to authentic…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2024-06-12
https://github.com/advisories/GHSA-qwvx-pmh3-3mjv
-
RedHat Security Advisory vom 2024-06-12
https://access.redhat.com/security/cve/CVE-2024-5891
-
RedHat Bugzilla vom 2024-06-12
https://bugzilla.redhat.com/show_bug.cgi?id=2283879