Exploit for CVE-2019-16097

kitploit · 2026-09-01

Description

Unauthorized admin creation vulnerability in Harbor container registry.

Affected Linuxfoundation Harbor versions

Linuxfoundation Harbor= 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.8.0, 1.8.1, 1.8.2, 1.9.0

All known vulnerabilities by product

CVSS 6.5 for CVE-2019-16097

6.5

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:HIGH

Availability:NONE

CVE Information

Exploit Details

Modified:2026-09-01 01:32

Last Seen:2026-09-03 22:32

Reporter:KitPloit

Tags

HarborUnauthorized admin creationContainer registryPocsuite framework

Other exploits for CVE-2019-16097

CVE-2019-16097-batch

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

Exploit for Missing Authorization in Linuxfoundation Harbor

2021-02-11 暂停更新GITEE

Exploit for Missing Authorization in Linuxfoundation Harbor

2019-09-25 dacadeGITHUB

Exploit for Missing Authorization in Linuxfoundation Harbor

2019-09-22 ianxtianxtGITHUB

Exploit for Missing Authorization in Linuxfoundation Harbor

2019-09-20 rockmelodiesGITHUB

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LUCKYBOOL1020-CVE-2019-16097
# CVE-2019-16097

Принцип уязвимости неавторизованного создания администратора в Harbor, docker и PoC[на основе фреймворка pocsuite]