HA
Product
Harbor
6
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Harbor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31668 | 7.7 | Nov 14 | User permission validation failure and disclosure of P2P preheat execution logs Affected: Harbor (Go) 2.x<=2.4.2; 2.5<=2.5.1 |
| CVE-2022-31669 | 7.7 | Nov 14 | Harbor fails to validate the user permissions when updating tag immutability policies Affected: Harbor (Go) 2.x<=2.4.2; 2.5<=2.5.1 |
| CVE-2022-31670 | 7.7 | Nov 14 | Harbor fails to validate the user permissions when updating tag retention policies Affected: Harbor (Go) 2.x<=2.4.2; 2.5<=2.5.1 |
| CVE-2022-31671 | 7.4 | Nov 14 | Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs Affected: Harbor (Go) 2.x<=2.4.2; 2.5<=2.5.1 |
| CVE-2022-31667 | 6.4 | Nov 14 | Harbor fails to validate the user permissions when updating a robot account Affected: Harbor (Go) 2.x<=2.4.2; 2.5<=2.5.1 |
| CVE-2022-31666 | 5.4 | Nov 14 | Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies Affected: Harbor 2.x<=2.4.2; 2.5<=2.5.1 |
Showing 6