PT-2024-11562 · Harbor · Harbor
CVE-2022-31668
·
Published
2024-11-14
·
Updated
2024-12-18
CVSS v3.1
7.7
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Harbor (affected versions not specified)
Description
The issue arises from Harbor's failure to validate user permissions when updating p2p preheat policies. An attacker can modify p2p preheat policies in other projects by sending a request to update a policy with an id belonging to a project the authenticated user doesn't have access to.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Improper Authorization
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Harbor