CVE-2019-10205CWE-522

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text

Medium · published January 2, 2020

CVSS v3.0
6.0
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.

The record
Technical detail
CVSS v3.0
6.0 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2020-01-02T16:31Z
EPSS history
Timeline
  • 02 JAN 16:31Z
    A flaw was found in the way Red Hat Quay stores robot account tokens in plain text
    cvelistv5