{"action":"Upgrade github.com/goharbor/harbor to 1.9.0-rc1 or later.","affected":[{"fixed":"1.9.0-rc1","introduced":"1.7.0"}],"component":"github.com/goharbor/harbor","cve_ids":["CVE-2019-16097"],"ecosystem":"Go","epss":0.22443,"exploited":false,"fixed_versions":["1.9.0-rc1"],"ghsa_id":"GHSA-9wvh-ff5f-xjpj","id":"tcs_01M5KF6AYHNNM8GCJ2A459RHJE","modified_at":"2024-08-21T15:58:49.524137Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-9wvh-ff5f-xjpj","https://nvd.nist.gov/vuln/detail/CVE-2019-16097","https://github.com/goharbor/harbor/commit/b6db8a8a106259ec9a2c48be8a380cb3b37cf517","https://github.com/goharbor/harbor/compare/v1.8.2...v1.9.0-rc1","https://github.com/goharbor/harbor/releases/tag/v1.7.6","https://github.com/goharbor/harbor/releases/tag/v1.8.3","https://github.com/ianxtianxt/CVE-2019-16097","https://unit42.paloaltonetworks.com/critical-vulnerability-in-harbor-enables-privilege-escalation-from-zero-to-admin-cve-2019-16097","http://www.vmware.com/security/advisories/VMSA-2019-0015.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9wvh-ff5f-xjpj","url":"https://osv.dev/vulnerability/GHSA-9wvh-ff5f-xjpj"}],"summary":"Missing Authorization in Harbor"}