Authentication flaw

2023-01-0815:15:00

PRIOn knowledge base

www.prio-n.com

jfrog artifactory

authentication bypass

privilege escalation

vulnerability

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.

CPENameOperatorVersion
artifactoryge6.0.0
artifactorylt6.23.41
artifactoryge7.0.0
artifactorylt7.37.13

Name	Operator	Version
artifactory	ge	6.0.0
artifactory	lt	6.23.41
artifactory	ge	7.0.0
artifactory	lt	7.37.13

References

www.jfrog.com/confluence/display/JFROG/CVE-2022-0668%3A+Artifactory+Authentication+Bypass