CVE-2019-3867

Name of the Vulnerable Software and Affected Versions Red Hat Quay versions 2 and 3

Description A vulnerability was found in the Quay web application, where sessions never expire. An attacker who gains access to a session could use it to control or delete a user's container repository.

Recommendations For Red Hat Quay versions 2 and 3, update the application to expire sessions after a certain period of inactivity to prevent unauthorized access. As a temporary workaround, consider implementing additional authentication measures, such as re-authentication for sensitive operations, to minimize the risk of exploitation.