Quay: quay: global read-only superuser can view robot account tokens
A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat Quay 3.10
Vendor
Red Hat
Product
Red Hat Quay 3.10
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.10 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1788561841
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.12
Vendor
Red Hat
Product
Red Hat Quay 3.12
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.12 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1788594376
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.14
Vendor
Red Hat
Product
Red Hat Quay 3.14
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1788593843
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.15
Vendor
Red Hat
Product
Red Hat Quay 3.15
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.15 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1788191755
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.16
Vendor
Red Hat
Product
Red Hat Quay 3.16
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.16 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1789563753
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.17
Vendor
Red Hat
Product
Red Hat Quay 3.17
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.17 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1790690298
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.18
Vendor
Red Hat
Product
Red Hat Quay 3.18
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.18 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791265590
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.9
Vendor
Red Hat
Product
Red Hat Quay 3.9
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.9 · Scoped product and version facts