Skip to content
OpenAdvisories
Critical · 9.3 CVE-2019-19023 EUVD-2021-1161GHSA-q6cj-6jvq-jwmhGO-2022-0863

Privilege Escalation in Cloud Native Computing Foundation Harbor

Published Mar 20, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Package: github.com/goharbor/harbor Ecosystem: Go

Description

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/goharbor/harbor >= 1.7.0, < 1.8.6 1.8.6 GHSA-q6cj-6jvq-jwmh
Go github.com/goharbor/harbor >= 1.9.0, < 1.9.3 1.9.3 GHSA-q6cj-6jvq-jwmh
Go github.com/goharbor/harbor >= 1.7.0, < 1.8.6 · >= 1.9.0, < 1.9.3 1.8.6, 1.9.3 GO-2022-0863

References