Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository.

Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay…

Read the rest of the story at Read More

Source: The Hacker News