low2.7
CVE-2021-46270
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insuf…
Impact
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | from 7.0.0 before 7.31.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46270%3A+Artifactory+Project+Admin+Repository+Name+Disclosure
- https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46270%3A+Artifactory+Project+Admin+Repository+Name+Disclosure
- https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories