This vulnerability in Red Hat Quay's exported logs feature allows unauthenticated attackers who possess a valid file ID to download exported action logs without authorization. Although file IDs are complex, they can be intercepted through plaintext email or webhook callbacks, enabling information disclosure. Sensitive data exposed may include usernames, email addresses, IP addresses, and metadata related to user actions. Deployments using LocalStorage backends are particularly vulnerable because logs persist indefinitely. The vulnerability is classified as missing authentication for a critical function (CWE-306). Red Hat has not yet provided an official fix or patch but recommends mitigation steps.

The vulnerability leads to information disclosure of sensitive log data, including usernames, email addresses, IP addresses, and action-specific metadata. There is no impact on integrity or availability. The exposure risk is increased in environments using LocalStorage backends due to indefinite log retention. This could allow attackers to gain unauthorized access to sensitive operational information.

Red Hat recommends configuring Red Hat Quay to use a cloud storage backend for exported logs, which provides time-limited download URLs, reducing the risk of unauthorized access. Additionally, securing all communication channels that deliver exported log file IDs, such as email and webhook callbacks, to prevent interception of file IDs in plaintext is advised. No official patch or fix has been released yet; patch status is not yet confirmed — check the vendor advisory for current remediation guidance.