CVE-2019-3867CWE-613

A vulnerability was found in the Quay web application

published March 18, 2021

CVSS
—
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access to a session, could use it to control or delete a user's container repository. Red Hat Quay 2 and 3 are vulnerable to this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00295 · 20.9th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2021-03-18T18:04Z
EPSS history
Timeline
  • 18 MAR 18:04Z
    A vulnerability was found in the Quay web application
    cvelistv5