CVE Daily

CVE-2019-10205

A flaw was found in the way Red Hat Quay stores robot account tokens in plain te...

Medium CVSS 6.3

Overview

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

CWE: CWE-522 Published: 2020-01-02T17:15:11.470
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags