Saturday, October 19, 2019

Critical Vulnerability In VMware Products

There has been found a critical vulnerability affecting VMware Cloud Foundation and Harbor Container Registry for PCF products. When exploited the vulnerability (CVE-2019-16919) that may lead to unauthorized access to push/pull/modify images in the target adjacent project.

Affected versions
-VMware Cloud Foundation (fix patch pending)
-VMware Harbor Container Registry for PCF 1.8.x versions earlier than 1.8.4
-VMware Harbor Container Registry for PCF 1.7.x versions are not affected

More information can be read from the correspondent security advisory.

No comments: