Medium severity4.3NVD Advisory· Published Dec 3, 2019· Updated Jun 17, 2026
CVE-2019-3990
CVE-2019-3990
Description
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Harbor/Harbordescription
Patches
Vulnerability mechanics
References
2- github.com/goharbor/harbor/security/advisories/GHSA-6qj9-33j4-rvhgnvdPatchThird Party Advisory
- www.tenable.com/security/research/tra-2019-50nvdThird Party Advisory
News mentions
0No linked articles in our index yet.