Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19508
HistoryMar 04, 2022 - 12:00 a.m.

JFrog Artifactory Access Control Error Vulnerability

2022-03-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
jfrog artifactory
access control
vulnerability
israel-based jfrog
privilege validation
repositories

EPSS

0.001

Percentile

22.7%

JFrog Artifactory is an open source general-purpose Artifact repository manager from Israel-based JFrog (Jfrog) that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production.JFrog Artifactory is vulnerable to an access control error vulnerability, which stems from insufficient privilege validation and the ability for project administrator users to list all available repository names. No detailed vulnerability details are available at this time.

EPSS

0.001

Percentile

22.7%

Related for CNVD-2022-19508