Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-27831

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.5%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2020-27831
  • Redhat » Quay » Version: 3.0.0
    cpe:2.3:a:redhat:quay:3.0.0
  • Redhat » Quay » Version: 3.0.1
    cpe:2.3:a:redhat:quay:3.0.1
  • Redhat » Quay » Version: 3.0.2
    cpe:2.3:a:redhat:quay:3.0.2
  • Redhat » Quay » Version: 3.0.3
    cpe:2.3:a:redhat:quay:3.0.3
  • Redhat » Quay » Version: 3.0.4
    cpe:2.3:a:redhat:quay:3.0.4
  • Redhat » Quay » Version: 3.0.5
    cpe:2.3:a:redhat:quay:3.0.5
  • Redhat » Quay » Version: 3.1.0
    cpe:2.3:a:redhat:quay:3.1.0
  • Redhat » Quay » Version: 3.1.1
    cpe:2.3:a:redhat:quay:3.1.1
  • Redhat » Quay » Version: 3.1.2
    cpe:2.3:a:redhat:quay:3.1.2
  • Redhat » Quay » Version: 3.1.3
    cpe:2.3:a:redhat:quay:3.1.3
  • Redhat » Quay » Version: 3.2.0
    cpe:2.3:a:redhat:quay:3.2.0
  • Redhat » Quay » Version: 3.2.1
    cpe:2.3:a:redhat:quay:3.2.1
  • Redhat » Quay » Version: 3.2.2
    cpe:2.3:a:redhat:quay:3.2.2
  • Redhat » Quay » Version: 3.3.0
    cpe:2.3:a:redhat:quay:3.3.0
  • Redhat » Quay » Version: 3.3.1
    cpe:2.3:a:redhat:quay:3.3.1
  • Redhat » Quay » Version: 3.3.2
    cpe:2.3:a:redhat:quay:3.3.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved