CyberRota Analysis
AI-GeneratedA remote attacker controlling a container registry can manipulate a client's token request, potentially exposing the victim's registry credentials to an unauthorized host. Organizations utilizing containerization technologies, particularly those prior to version 0.41.0, should prioritize addressing this vulnerability to safeguard their registry credentials from unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.