REDHAT-BUG-2359143: High severity Quay Mirror Registry vulnerability

Published Apr 11, 2025

Updated

There's a privilege escalation vulnerability in quay-app container for the Mirror Registry application, where an attacker with access to the containerized pod can escalate its privilege to root access within the pod environment.

Affected Software

1 affected component

Quay Mirror Registry

Event History

Apr 11, 2025

Data Sourced

via Red Hat·07:05 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2359143?

The severity of REDHAT-BUG-2359143 is classified as high with a score of 7.

What is the risk associated with REDHAT-BUG-2359143?

The risk associated with REDHAT-BUG-2359143 is a privilege escalation vulnerability within the quay-app container.

How can I mitigate REDHAT-BUG-2359143?

To mitigate REDHAT-BUG-2359143, ensure that access to the containerized pod is restricted and update the quay-app container to a patched version.

Is there a known exploit for REDHAT-BUG-2359143?

While specific exploits may not be publicly available, the vulnerability allows attackers to escalate privileges to root within the pod environment.

When was REDHAT-BUG-2359143 published?

REDHAT-BUG-2359143 was published on April 11, 2025.