Lucene search
HistoryApr 25, 2024 - 6:15 p.m.
CVE-2024-3624
flaw
quay
database
storage
unauthorized access
CVSS3
7.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.0%
A flaw was found in how Quay’s database is stored in plain-text in mirror-registry on the jinja’s config.yaml file. This flaw allows a malicious actor with access to this file to gain access to Quay’s database.
Related
redhatcve
redhatcve
CVE-2024-3624
2024-04-10 21:22:36
cve
cve
CVE-2024-3624
2024-04-25 18:15:10
vulnrichment
vulnrichment
cvelist
cvelist
CVSS3
7.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-3624