CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:redhat:quay:1.17.1:*:*:*:*:*:*:*
Informations
Vendor
redhatProduct
quayVersion
1.17.1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace. | 4.3 |
Moyen |
||
| A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token. The token is not refreshed for every request or when a user logged out and in again. An attacker could use a leaked token to gain access to the system using the user's account. | 8.8 |
Haute |
