← Database

CVE-2022-46463

HIGH CVSS: 7.5 Published: 2023-01-13 Modified: 2026-06-17

Description

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Affected Platforms

Linuxfoundation Harbor

Weakness Type

CWE-306, CWE-306

References