Medium WID-SEC-2024-0884 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Offenlegung von Informationen

Published Apr 14, 2024 · Updated Apr 14, 2024 · de-DE

Vendor: jfrog Product: artifactory Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um Informationen offenzulegen.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Medium 4.3

CVE-2024-3505

JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments.

jfrog Artifactory Self-Hosted

Apr 15, 2024

Revision history

2024-04-14 #1
Initiale Fassung

References

JFrog Security Advisory vom 2024-04-14
https://jfrog.com/help/r/booxtVWM8HjIoXm7gJVD9A/kwSVvjGqnyLPpQXtu36MTQ