CVE-2019-10205

Description

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

CVSS Version 3.1

nvd

CVE ID: CVE-2019-10205
Base Score: 6.3
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Impact Score: 5.5
Exploitability Score: 0.8

CVSS Version 3.0

redhat

CVE ID: CVE-2019-10205
Base Score: 6.0
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H

CVSS Version 2.0

nvd

CVE ID: CVE-2019-10205
Base Score: 4.6
Base Severity: MEDIUM
Vector String:AV:L/AC:L/Au:N/C:P/I:P/A:P

Refrence: NVDMITRE