Advisories · Technology
mirror registry for Red Hat OpenShift.
Every CVE that names mirror registry for Red Hat OpenShift among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Server-side request forgery (SSRF)
- CVSS 5.2 Medium
Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Mirror-registry: remote code execution using pickle deserialization
- mirror registry for Red Hat OpenShift 2.0
- Red Hat Quay 3.10
- Insecure deserialization
- CVSS 7.4 High
Mirror-registry: quay: insecure direct object reference in blobupload
- mirror registry for Red Hat OpenShift 2.0
- Red Hat Quay 3.10
- Broken access control
- CVSS 5.3 Medium
Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Information disclosure
- CVSS 6.5 Medium
Mirror-registry: quay: quay: server-side request forgery via log export functionality
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface
- mirror registry for Red Hat OpenShift
- mirror registry for Red Hat OpenShift 2
- Open redirect
- CVSS 6.5 Medium
Mirror-registry: host header injection in mirror-registry
- mirror registry for Red Hat OpenShift
- Open redirect
- CVSS 8.2 High
Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry
- Red Hat MIRROR-REGISTRY-2.0-RHEL-8
- mirror registry for Red Hat OpenShift
- Broken access control
- CVSS 7.3 High
Mirror-registry: database user and password stored in plain-text
- mirror registry for Red Hat OpenShift
- CWE-256
- CVSS 7.3 High
Mirror-registry: redis password stored in plain-text
- mirror registry for Red Hat OpenShift
- CWE-256
- CVSS 6.5 Medium
Mirror-registry: default database secret key stored in plain-text on initial configuration file
- mirror registry for Red Hat OpenShift
- CWE-256
- CVSS 8.8 High
Mirror-registry: plain-text default csrf secret key
- mirror registry for Red Hat OpenShift
- CWE-256