漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Mirror-registry: quay: insecure direct object reference in blobupload
Vulnerability Description
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
Red Hat Quay 安全漏洞
Vulnerability Description
Red Hat Quay是美国红帽(Red Hat)公司的一款分布式容器镜像仓库,它主要用于构建、分布和部署容器。 Red Hat Quay存在安全漏洞,该漏洞源于容器镜像上传过程存在缺陷,可能导致经过身份验证的用户干扰其他用户的上传进程。
CVSS Information
N/A
Vulnerability Type
N/A