CVE-2019-10205
published 2020-01-02CVE-2019-10205: A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database…
PriorityP425medium6.3CVSS 3.1
AVLACLPRHUINSUCLIHAH
EPSS
0.27%
18.8th percentile
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| red_hat | quay | — | — |
| redhat | quay | — | — |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
nvdv3.06.0MEDIUMCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
quay: Red Hat Quay stores robot account tokens in plain text
vendor_redhat·2019-09-18·CVSS 6.3
CVE-2019-10205 [MEDIUM] CWE-522 quay: Red Hat Quay stores robot account tokens in plain text
quay: Red Hat Quay stores robot account tokens in plain text
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
GHSA
GHSA-hc7v-pwgp-8mp6: A flaw was found in the way Red Hat Quay stores robot account tokens in plain text
ghsa_unreviewed·2022-05-24
CVE-2019-10205 [MEDIUM] CWE-522 GHSA-hc7v-pwgp-8mp6: A flaw was found in the way Red Hat Quay stores robot account tokens in plain text
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
No detection rules found.
No public exploits indexed.
2020-01-02
Published