CVEvulnerability
CVE-2019-19937
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-862
Description
In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."
Affected configurations
• jfrog artifactory (< 6.18)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting Vendor Advisory
- https://www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18 Release Notes
- https://www.secureworks.com/research/subject/advisories Third Party Advisory
- https://www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting Vendor Advisory
- https://www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18 Release Notes
- https://www.secureworks.com/research/subject/advisories Third Party Advisory