Skip to content
Sign in
6.0 Medium

CVE-2019-10205 A flaw was found in the way Red Hat Quay stores robot account tokens in plain text

Description

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

Affected products and versions

Product Affected versions Fixed in
quay Versions not published

Other CVEs of quay

The 2 CVEs of quay →
CVE-2019-3864 A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include… 5.4 Medium
Track this CVE