9.4Kritisch
CVE-2026-4404Use of hard coded credentials in GoHarbor Harbor
Beschreibung
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Harbor | Harbor | 0.1.0 – ≤ 2.15.0 | |
| linuxfoundation | harbor | ≤ 2.15.0 |
Referenzen und Patches
- https://goharbor.io/docs/1.10/install-config/run-installer-script/#:~:text=If%20you%20did%20not%20change%20th… Product
- https://github.com/goharbor/harbor/issues/1937 Issue Tracking
- https://cwe.mitre.org/data/definitions/1393.html Not Applicable
- https://github.com/goharbor/harbor/pull/22751 Issue Tracking
- https://www.kb.cert.org/vuls/id/577436 Third Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*≤ 2.15.0