Security · High impactFan score 20 · Tier C2 sources
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
The Hacker News ·
The Brief · written from 2 sources
- SecurityWeek reports a critical vulnerability in Red Hat Quay.
- Attackers could exploit the flaw to steal private container images and overwrite repositories.
- The flaw could also let attackers maintain persistent access.
Why it matters
Teams running Red Hat Quay to store container images could lose confidentiality and integrity of private repositories, and attackers could keep access after the initial compromise.
Who’s affected
- Teams running Red Hat Quay
- #red-hat-quay
- #vulnerability
- #container-security
- #container-registry
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a…
Timeline
SecurityWeek reports the critical Red Hat Quay vulnerability
SecurityWeek
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
The Hacker News
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry