Vulnerabilities > CVE-2019-19030 - Unspecified vulnerability in Linuxfoundation Harbor

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

linuxfoundation

NVD

Published: 2022-12-26

Updated: 2023-01-06

Summary

Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists.

Vulnerable Configurations

Part	Description	Count
Application	Linuxfoundation Linuxfoundation Harbor 2.0.0 Linuxfoundation Harbor 0.1.0 Linuxfoundation Harbor 0.1.1 Linuxfoundation Harbor 0.3.0 Linuxfoundation Harbor 0.3.5 Linuxfoundation Harbor 0.4.0 Linuxfoundation Harbor 0.4.1 Linuxfoundation Harbor 0.4.5 Linuxfoundation Harbor 0.5.0 Linuxfoundation Harbor 1.1.0 Linuxfoundation Harbor 1.1.1 Linuxfoundation Harbor 1.1.2 Linuxfoundation Harbor 1.2.0 Linuxfoundation Harbor 1.2.2 Linuxfoundation Harbor 1.3.0 Linuxfoundation Harbor 1.4.0 Linuxfoundation Harbor 1.4.1 Linuxfoundation Harbor 1.5.0 Linuxfoundation Harbor 1.5.1 Linuxfoundation Harbor 1.5.2 Linuxfoundation Harbor 1.5.3 Linuxfoundation Harbor 1.5.4 Linuxfoundation Harbor 1.6.0 Linuxfoundation Harbor 1.6.1 Linuxfoundation Harbor 1.6.2 Linuxfoundation Harbor 1.6.3 Linuxfoundation Harbor 1.7.0 Linuxfoundation Harbor 1.7.1 Linuxfoundation Harbor 1.7.2 Linuxfoundation Harbor 1.7.3 Linuxfoundation Harbor 1.7.4 Linuxfoundation Harbor 1.7.5 Linuxfoundation Harbor 1.7.6 Linuxfoundation Harbor 1.7.7 Linuxfoundation Harbor 1.7.8 Linuxfoundation Harbor 1.8.0 Linuxfoundation Harbor 1.8.1 Linuxfoundation Harbor 1.8.2 Linuxfoundation Harbor 1.8.3 Linuxfoundation Harbor 1.8.4 Linuxfoundation Harbor 1.8.5 Linuxfoundation Harbor 1.8.6 Linuxfoundation Harbor 1.9.0 Linuxfoundation Harbor 1.9.1 Linuxfoundation Harbor 1.9.2 Linuxfoundation Harbor 1.9.3 Linuxfoundation Harbor 1.9.4 Linuxfoundation Harbor 1.10.0 Linuxfoundation Harbor 1.10.1 Linuxfoundation Harbor 1.10.2	110

References

https://github.com/goharbor/harbor/security/advisories/GHSA-q9x4-q76f-5h5j