Description
JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| artifactory | jfrog / artifactory | >= 0, < 7.111.21 | affected |
| artifactory | jfrog / artifactory | >= 7.117.0, < 7.117.28 | affected |
| artifactory | jfrog / artifactory | >= 7.125.0, < 7.125.20 | affected |
| artifactory | jfrog / artifactory | >= 7.133.0, < 7.133.29 | affected |
| artifactory | jfrog / artifactory | >= 7.146.0, < 7.146.38 | affected |
| artifactory | jfrog / artifactory | >= 7.161.0, < 7.161.20 | affected |