Mirror-registry: quay: insecure direct object reference in blobupload
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
mirror registry for Red Hat OpenShift 2.0
Vendor
Red Hat
Product
mirror registry for Red Hat OpenShift 2.0
Platforms
Unknown
Default status
affected
Package
openshift/mirror-registry-rhel8
Package collection
https://catalog.redhat.com/software/containers/
mirror registry for Red Hat OpenShift 2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1782177012
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.10
Vendor
Red Hat
Product
Red Hat Quay 3.10
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.10 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1779822261
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.12
Vendor
Red Hat
Product
Red Hat Quay 3.12
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.12 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1779811412
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.14
Vendor
Red Hat
Product
Red Hat Quay 3.14
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1779689392
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.15
Vendor
Red Hat
Product
Red Hat Quay 3.15
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.15 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1780891395
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.16
Vendor
Red Hat
Product
Red Hat Quay 3.16
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.16 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1779204086
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.17
Vendor
Red Hat
Product
Red Hat Quay 3.17
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.17 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1779922205
unaffected
rpm
*
Unavailable
None listed
Red Hat Quay 3.9
Vendor
Red Hat
Product
Red Hat Quay 3.9
Platforms
Unknown
Default status
affected
Package
quay/quay-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Quay 3.9 · Scoped product and version facts