JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.
Weakness
The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Artifactory | Jfrog | 6.0.0 (including) | 6.23.41 (excluding) |
| Artifactory | Jfrog | 7.0.0 (including) | 7.37.13 (excluding) |