CVE-2019-10205

Katalog CVE

CVSS 6.3 · Medium EPSS 0,27%

Kerentanan Insufficiently Protected Credentials pada redhat quay. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

Rincian

Terbit di NVD

2 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10205 issue tracking · advisory vendor