Description

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content.

It's not recommended to have Harbor registry publicly accessible.

Remediation

It's recommended to restrict access to this service on production systems

References

CVE-2022-46463

Related Vulnerabilities

WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)

Apache Axis2 information disclosure

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4901)

Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.25)

MinIO Information Disclosure (CVE-2023-28432)

Severity

High

Classification

CVE-2022-46463 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Configuration