387 matches found
JFrog Artifactory 6.7.3 - Admin Login Bypass
JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...
[SECURITY] Fedora 44 Update: jfrog-cli-2.119.0-1.fc44
JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...
Jfrog Artifactory <6.17.0 - Default Admin Password
Jfrog Artifactory prior to 6.17.0 uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. id: CVE-2019-17444 info: name: Jfrog Artifactory...
Fedora 44 : jfrog-cli (2026-9f70b173c8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f70b173c8 advisory. Update to 2.119.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: trivy-operator, cert-manager-cmctl-fips, kube-mgmt-fips, eksctl, ratify, kube-mgmt, falcoctl-fips, kubescape-operator-fips, gitlab-operator-fips, gogatekeeper, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, linkerd2,...
CVE-2026-42018
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
CVE-2026-69106
The CVE-2026-69106 entry concerns JFrog Artifactory (self-managed releases). A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. The NVD/CVE records confirm this as a high-severity issue (CVSS v3.1 base ...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
EUVD-2026-57388
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...
CVE-2026-42018
JFrog Artifactory is affected by CVE-2026-42018, where an unauthenticated caller could receive an internal anonymous-user token when anonymous access is disabled, potentially exposing sensitive resources. This aligns with the provided CVSSv3.1 base score of 7.5 (HIGH) with network attack vector a...
CVE-2026-69107
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
CVE-2026-69107
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
EUVD-2026-57319
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
CVE-2026-69107 Potential unauthorized artifact access in JFrog Artifactory
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...
CVE-2026-69107
CVE-2026-69107 affects JFrog Artifactory. An unauthenticated user may access restricted artifacts under specific conditions. The CVSS v3.1 base score is 5.9 (MEDIUM), with Network attack vector, high attack complexity, no privileges required, and no user interaction. Impact is confidentiality los...
CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...
CVE-2026-69105
CVE-2026-69105 describes an unauthenticated issue affecting JFrog Artifactory where, under specific conditions, untrusted package content can be cached, potentially compromising artifact integrity and availability. The connected sources (NVD, CVE List) reiterate that an unauthenticated attacker c...