Anchore Enterprise vulnerabilities
3 known vulnerabilities in Anchore Enterprise from Anchore. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Anchore Enterprise: Incorrect Use of Privileged APIs
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifyi
- 7.3 High severity
Anchore Enterprise: Improper Neutralization of Special Elements used in an SQL Command
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contai
- 7.5 High severity
Anchore Enterprise: Insufficiently Protected Credentials
Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl.