Lucene search

[email protected]CVE-2020-7931

HistoryJan 23, 2020 - 3:15 p.m.

CVE-2020-7931

2020-01-2315:15:14

[email protected]

web.nvd.nist.gov

cve-2020-7931

jfrog

artifactory

freemarker

template processing

remote code execution

authorized_keys

nvd

vulnerability

security

patch

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template.

Affected configurations

NVD

Node

jfrogartifactoryRange<5.11.8-

jfrogartifactoryRange6.0.0–6.1.6-

jfrogartifactoryRange6.2.0–6.3.9-

jfrogartifactoryRange6.4.0–6.7.8-

jfrogartifactoryRange6.8.0–6.8.17

jfrogartifactoryRange6.9.0–6.9.6

jfrogartifactoryRange6.10.0–6.10.9

jfrogartifactoryRange6.11.0–6.11.7

jfrogartifactoryRange6.12.0–6.12.3

jfrogartifactoryRange6.13.0–6.13.2

jfrogartifactoryRange6.14.0–6.14.2

jfrogartifactoryRange6.15.0–6.15.1

CPENameOperatorVersion
jfrog:artifactoryjfrog artifactorylt5.11.8
jfrog:artifactoryjfrog artifactorylt6.1.6
jfrog:artifactoryjfrog artifactorylt6.3.9
jfrog:artifactoryjfrog artifactorylt6.7.8
jfrog:artifactoryjfrog artifactorylt6.8.17
jfrog:artifactoryjfrog artifactorylt6.9.6
jfrog:artifactoryjfrog artifactorylt6.10.9
jfrog:artifactoryjfrog artifactorylt6.11.7
jfrog:artifactoryjfrog artifactorylt6.12.3
jfrog:artifactoryjfrog artifactorylt6.13.2

CPE	Name	Operator	Version
jfrog:artifactory	jfrog artifactory	lt	5.11.8
jfrog:artifactory	jfrog artifactory	lt	6.1.6
jfrog:artifactory	jfrog artifactory	lt	6.3.9
jfrog:artifactory	jfrog artifactory	lt	6.7.8
jfrog:artifactory	jfrog artifactory	lt	6.8.17
jfrog:artifactory	jfrog artifactory	lt	6.9.6
jfrog:artifactory	jfrog artifactory	lt	6.10.9
jfrog:artifactory	jfrog artifactory	lt	6.11.7
jfrog:artifactory	jfrog artifactory	lt	6.12.3
jfrog:artifactory	jfrog artifactory	lt	6.13.2

Rows per page:

1-10 of 121

References

github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0006.md

www.jfrog.com/confluence/display/RTF/Release+Notes

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

Related for CVE-2020-7931

prion1 cvelist1 nvd1 osv1