Security Advisory

CVE-2019-10205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-02 16:31:53
Last updated 2024-08-04 22:17:20
Assigner redhat
CVSS score 6.0
State PUBLISHED

Description

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.