critical9.8
CVE-2018-19971
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Impact
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | Version 6.5.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3