Intrusion PreventionHarbor.Project.Harbor.user.API.Privilege.Escalation
Description
This indicates an attack attempt to exploit a Privilege Escatlation Vulnerability in Harbor project Harbor.
A remote attacker could exploit this vulnerability by sending an API request with a crafted JSON payload. Successful exploitation of this vulnerability could allow the attacker to create users with admin privileges.
Affected Products
Harbor project Harbor prior to 1.7.6
Harbor project Harbor prior to 1.8.3
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/goharbor/harbor/commit/b6db8a8a106259ec9a2c48be8a380cb3b37cf517
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48404 |
| Created | Nov 05, 2019 |
| Updated | Nov 28, 2019 |
| Risk |
|
| CVE ID | CVE-2019-16097 |
| Exploit Prediction Score | 96.49% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |