312 matches found
CVE-2021-45074
JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to delete other known users OAuth token, which will force a reauthentication on an active session or in the next UI session...
Improper access control
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation...
Improper access control
JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to delete other known users OAuth token, which will force a reauthentication on an active session or in the next UI session...
CVE-2021-46270
CVE-2021-46270 affects JFrog Artifactory prior to version 7.31.10. The issue is a Broken Access Control where a project admin user can list all repository names due to insufficient permission validation. Impact is limited to the ability to enumerate repositories; no other data exposure is specifi...
CVE-2021-46270
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation...
CVE-2021-45074
JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to delete other known users OAuth token, which will force a reauthentication on an active session or in the next UI session...
CVE-2021-45074
CVE-2021-45074 affects JFrog Artifactory prior to version 7.29.3 and prior to 6.23.38. The issue is a Broken Access Control where a low-privileged user can delete other known users’ OAuth tokens, forcing reauthentication on an active session or the next UI session. Connected sources include Red H...
JFrog Artifactory 安全漏洞
JFrog Artifactory is an open source general-purpose Artifact repository manager from Israel-based JFrog Jfrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production.JFrog Artifactory...
JFrog Artifactory 安全漏洞
JFrog Artifactory is an open source general-purpose Artifact repository manager from Israel-based JFrog Jfrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production.JFrog Artifactory is...
RCE Bugs in WhatsApp, Other Hugely Popular VoIP Apps: Patch Now!
WhatsApp and BlueJeans are just two of the world’s most popular communication apps that are using an open-source library riddled with newfound security holes. One thing this open-source, flawed library shares with the Apache Log4J logging library fiasco that started in December: It’s ubiquitous...
High-Severity RCE Bug Found in Popular Apache Cassandra Database
Researchers have shared details about a now-patched, high-severity security bug in the Apache Cassandra open-source NoSQL distributed database that’s easy to exploit and, if left unpatched, could enable attackers to gain remote code execution RCE. The bug, which involves how Cassandra creates...
[SECURITY] [DSA 5076-1] h2database security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5076-1 [email protected] https://www.debian.org/security/ Markus Koschany February 15, 2022 https://www.debian.org/security/faq -...
CVE-2021-3860
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
Sql injection
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
Jfrog JFrog Artifactory SQL注入漏洞
Jfrog JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog Jfrog that supports clustered and high-availability Docker registries and provides an end-to-end solution for automating artifacts used to track artifacts from development to production. JFr...
CVE-2021-3860
Affected software : JFrog Artifactory before 7.25.4 (Enterprise+ deployments). Vulnerability : Blind SQL Injection by a low-privileged authenticated user due to incomplete validation when performing SQL queries. Impact : as described in multiple sources (high-severity CVSS in 3.1 context, partial...
PT-2021-22238 · Jfrog · Jfrog Artifactory
Name of the Vulnerable Software and Affected Versions: JFrog Artifactory versions prior to 7.25.4 Description: The issue is related to Blind SQL Injection, which can be exploited by a low-privileged authenticated user due to incomplete validation when performing an SQL query. Recommendations: For...
CVE-2021-3860
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
CVE-2021-3860
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
