CVE-2019-10205: Medium severity red hat quay vulnerability
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10205?
CVE-2019-10205 is a vulnerability in Red Hat Quay that allows attackers to read or write container images stored in the registry.
How severe is CVE-2019-10205?
CVE-2019-10205 has a severity score of 6.3, which is considered medium.
Which software versions are affected by CVE-2019-10205?
CVE-2019-10205 affects Red Hat Quay version 3.0.0.
How can an attacker exploit CVE-2019-10205?
An attacker who can perform database queries in the Red Hat Quay database can exploit CVE-2019-10205 by using the stored robot account tokens to read or write container images.
Is there a fix for CVE-2019-10205?
Yes, it is recommended to upgrade Red Hat Quay to a version that has the fix for CVE-2019-10205. Please refer to the official Red Hat advisory for more information.