Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-22278

Harbor fails to validate the user permissions when updating project configurations

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

harbor harbor

Default version status: unaffected

  • 2.9.4 to < <v2.9.5affected
  • 2.10.2 to < <v2.10.3affected

References