CVE-2022-31671 - Harbor Unauthorized Access Vulnerability

CVE ID : CVE-2022-31671
Published : Nov. 14, 2024, 12:15 p.m. | 24 minutes ago
Description : Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database.
Severity: 7.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...