CVE Vulnerabilities

CVE-2022-0668

Improper Handling of Insufficient Privileges

Published: Jan 08, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.

Weakness

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

Affected Software

Name Vendor Start Version End Version
Artifactory Jfrog 6.0.0 (including) 6.23.41 (excluding)
Artifactory Jfrog 7.0.0 (including) 7.37.13 (excluding)

References