9.4Kritik
CVE-2026-4404Use of hard coded credentials in GoHarbor Harbor
Açıklama
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Harbor | Harbor | 0.1.0 – ≤ 2.15.0 | |
| linuxfoundation | harbor | ≤ 2.15.0 |
Kaynaklar ve yamalar
- https://goharbor.io/docs/1.10/install-config/run-installer-script/#:~:text=If%20you%20did%20not%20change%20th… Product
- https://github.com/goharbor/harbor/issues/1937 Issue Tracking
- https://cwe.mitre.org/data/definitions/1393.html Not Applicable
- https://github.com/goharbor/harbor/pull/22751 Issue Tracking
- https://www.kb.cert.org/vuls/id/577436 Third Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*≤ 2.15.0