CVEvulnerability

CVE-2019-10205

6.3 MEDIUM Published 2020-01-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS 3.0 ([email protected])
6.0 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-522

Description

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

Affected configurations

• redhat quay 3.0.0

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References