← All credits
Red Hat would like to thank Solomon Roberts (BadgerOps.net works) for reporting this issue.
4 vulnerability records and advisories credit this contributor.
CVE-2024-3625
Mirror-registry: redis password stored in plain-text
CVE-2024-3624
Mirror-registry: database user and password stored in plain-text
CVE-2024-3623
Mirror-registry: default database secret key stored in plain-text on initial configuration file
CVE-2024-3622
Mirror-registry: plain-text default csrf secret key