6.4
Medium
CVE-2022-31669 Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a…
Description
Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies configured in other projects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Harbor | Versions not published |
Other CVEs of Harbor
The 7 CVEs of Harbor →
CVE-2022-31668
Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p…
7.4
High
CVE-2022-31667
Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the…
6.4
Medium
CVE-2022-31670
Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a…
7.7
High
CVE-2022-31671
Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution…
7.4
High