Vulnerability Details CVE-2018-19971
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3
Products affected by CVE-2018-19971
-
cpe:2.3:a:jfrog:artifactory:6.5.9