CVE-2019-19023 - Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform

Back Back to CVE browser

MEDIUM

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform

Published Mar 20, 2020

9.3

MEDIUM

CVSS 3.1

EPSS 1.62%

Description

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.

Affected products

github.com/goharbor/harbor

Go

Introduced 1.7.0 Fixed 1.8.6
github.com/goharbor/harbor

Go

Introduced 1.9.0 Fixed 1.9.3

Ecosystem	Package	Introduced	Fixed
Go	github.com/goharbor/harbor	1.7.0	1.8.6
Go	github.com/goharbor/harbor	1.9.0	1.9.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1161
Advisory
https://github.com/advisories/GHSA-q6cj-6jvq-jwmh
Advisory
https://github.com/goharbor/harbor/security/advisories
x_refsource_MISCThird Party Advisory
https://github.com/goharbor/harbor/security/advisories/GHSA-3868-7c5x-4827
https://nvd.nist.gov/vuln/detail/CVE-2019-19023
https://tanzu.vmware.com/security/cve-2019-19023
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1161		Advisory
https://github.com/advisories/GHSA-q6cj-6jvq-jwmh		Advisory
https://github.com/goharbor/harbor/security/advisories		x_refsource_MISCThird Party Advisory
https://github.com/goharbor/harbor/security/advisories/GHSA-3868-7c5x-4827
https://nvd.nist.gov/vuln/detail/CVE-2019-19023
https://tanzu.vmware.com/security/cve-2019-19023		x_refsource_CONFIRMThird Party Advisory