medium4.9
CVE-2021-46687
JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API.
Impact
JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | from 6.0.0 before 6.23.38 from 7.0.0 before 7.31.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
- https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
- https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
- https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories