high7.2
CVE-2019-19937
In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "un…
Impact
In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | before 6.18 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting
- https://www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18
- https://www.secureworks.com/research/subject/advisories
- https://www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting
- https://www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18
- https://www.secureworks.com/research/subject/advisories