Description
JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| artifactory | jfrog / artifactory | >= 0, < 7.111.20 | affected |
| artifactory | jfrog / artifactory | >= 7.117.0, < 7.117.27 | affected |
| artifactory | jfrog / artifactory | >= 7.125.0, < 7.125.19 | affected |
| artifactory | jfrog / artifactory | >= 7.133.0, < 7.133.28 | affected |
| artifactory | jfrog / artifactory | >= 7.146.0, < 7.146.8 | affected |