CVE-2025-4374 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin"…
Medium CVSS: 6.5

CVE-2025-4374

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.
Vendor
Redhat
Product
Quay
CWE
CWE-266
Yayın Tarihi
2025-05-06 15:16:05
Güncelleme
2025-07-31 18:00:55
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-266 Quay MEDIUM Redhat 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-4374 https://bugzilla.redhat.com/show_bug.cgi?id=2364267