2026年11月12日 11:27 ET 发布 · 更新于 1 天前 · 1 个来源
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
The Hacker News
·
原始报道
INFERY
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay
原文