Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-3624

Mirror-registry: database user and password stored in plain-text

Description

A flaw was found in how Quay's database is stored in plain-text in mirror-registry on the jinja's config.yaml file. This flaw allows a malicious actor with access to this file to gain access to Quay's database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mirror-registry

Default version status: affected

Red Hat mirror registry for Red Hat OpenShift

Default version status: affected

References