BIT-harbor-2026-4404

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/harbor/BIT-harbor-2026-4404.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-harbor-2026-4404

Aliases

Published

2026-08-17T05:41:17Z

Modified

2026-09-08T08:48:22Z

Summary

Use of hard coded credentials in GoHarbor Harbor

Details

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Database specific

{
    "cpes": [
        "cpe:2.3:a:linuxfoundation:harbor:*:*:*:*:*:*:*:*"
    ],
    "severity": "Critical"
}

References

Affected packages

Bitnami / harbor

Package

Name: harbor
Purl: pkg:bitnami/harbor

Severity

9.4 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.15.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/harbor/BIT-harbor-2026-4404.json"