A vulnerability has been reported in Docker Hub, which could allow an authenticated attacker to impersonate another user at the registry level and pull, push, or delete container images within the scope of the impersonated user's permissions.
Target Audience:
All organizations and individuals using Docker Hub.
Risk Assessment:
High risk of software supply chain compromise due to potential user impersonation and unauthorized access to container repositories.
Impact Assessment:
Potential for unauthorized access to container repositories and allow attackers to publish malicious container images under a legitimate user's identity, potentially compromising image integrity and downstream deployments.
The information provided herein is on "as is" basis, without warranty of any kind.