High WID-SEC-2024-0573 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 6, 2024 · Updated Mar 6, 2024 · de-DE

Vendor: jfrog Product: artifactory Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um Informationen offenzulegen.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Critical 9.3

CVE-2023-42662

JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens

JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE brows…

jfrog artifactory

Mar 7, 2024

Revision history

2024-03-06 #1
Initiale Fassung

References

JFrog Security Advisories vom 2024-03-06
https://jfrog.com/help/r/jfrog-release-information/cve-2023-42662-improper-sso-mechanism-may-lead-to-exposure-of-access-tokens
GitHub Advisory Database vom 2024-03-06
https://github.com/advisories/GHSA-vf92-j6mr-cjmj