Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21735
HistoryOct 18, 2019 - 5:31 a.m.

Authentication Bypass

2019-10-1805:31:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

32.6%

github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project.

0.001 Low

EPSS

Percentile

32.6%