Multiple Vulnerabilities identified in Harbor

Products

• VMware vSphere ESXi

Issue/Introduction

An access control issue in Harbor allows attackers to access public and private image repositories without authentication. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive data stored in Harbor.

Environment

Harbor 2.x

Resolution

Harbor Vulnerability affected and fixed version.

CVE Number	Affected Number	Fixed Version
CVE-2022-31671	2.4 and 2.5	2.5.1 and above
CVE-2022-31670	2.4 and 2.5	2.5.1 and above
CVE-2022-31669	2.5.2	2.5.3 and above
CVE-2022-31668	2.5.2	2.5.3 and above
CVE-2022-31667	Version below 2.5.1	2.5.2 and above
CVE-2022-31666	Version below 2.5.1	2.5.2 and above