CVE Vulnerabilities

CVE-2024-22278

Improper Privilege Management

Published: Aug 02, 2024 | Modified: Aug 14, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Harbor Linuxfoundation * 2.9.5 (excluding)
Harbor Linuxfoundation 2.10.0 (including) 2.10.3 (excluding)

Potential Mitigations

References