CVE-2019-17444

Katalog CVE

CVSS 9.8 · Critical EPSS 69,4%

Kerentanan Weak Password Requirements pada jfrog artifactory. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.

Rincian

Terbit di NVD

12 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-521: Weak Password Requirements

EPSS (30 hari)

69,4% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.jfrog.com/confluence/display/JFROG/Artifactory+Release+Notes release notes · advisory vendor
• https://www.jfrog.com/confluence/display/JFROG/JFrog+Artifactory advisory vendor