Security Advisory

CVE-2019-17444

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-12 21:55:55
Last updated 2024-09-16 19:51:55
Assigner palo_alto
CVSS score 9.8
State PUBLISHED

Description

Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.