CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Affected products

Harbor

Linuxfoundation Harbor

≤ 2.5.3

CVSS 3.1

7.5 HIGH

EPSS

6.2% (93th percentile)

Weakness

CWE-306

NVD status

Modified

Published

2023-01-12