Covered by 2 outlets — first reported by SecurityWeek, Nov 12, 09:23 UTC
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
In brief
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
SecurityWeekFirst report
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
The Hacker News
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository.
Explained
The technology and terms in this story. Learn more