BIT-harbor-2026-4404

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/harbor/BIT-harbor-2026-4404.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-harbor-2026-4404

Aliases

Published

2026-08-17T05:41:17.901Z

Modified

2026-08-17T08:10:45.372296879Z

Summary

Use of hard coded credentials in GoHarbor Harbor

Details

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Database specific

{
    "severity": "Critical",
    "cpes": [
        "cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*"
    ]
}

References

Affected packages

Bitnami / harbor

Package

Name: harbor
Purl: pkg:bitnami/harbor

Severity

9.4 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.15.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/harbor/BIT-harbor-2026-4404.json"