BIT-artifactory-2021-45730

vendorUSosv

view advisory published 2024-03-06Licence: per source

JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-45730US	medium4.9	0.56% (47th)	—	2022-05-19
JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts conf…

references

External citations — patches, advisories, analysis.

https://nvd.nist.gov/vuln/detail/CVE-2021-45730WEB
https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45730%3A+Artifactory+Broken+Access+Control+on+Repository+Layouts+ConfigurationWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan