CVE-2022-31669
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 285
Summary
CVE-2022-31669 is a vulnerability affecting Harbor, an open-source container registry. The flaw permits unauthorized users to modify tag immutability policies in projects they don't have access to. An attacker can exploit this by sending a request to update a tag immutability policy with an id that belongs to a different project. This vulnerability can lead to unintended changes to tag immutability policies and may pose a risk to container security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.