Red Hat Quay flaws expose private images and tenant tokens
Red Hat Quay has two critical flaws that let attackers reach private container images and other tenants' robot account tokens. One flaw affects any Quay registry an attacker can access, and the other lets a Quay user who can create a namespace steal robot account tokens from other tenants. Quay registry access and key trust The first flaw gives an attacker the ability to read and overwrite private images in…