High WID-SEC-2024-1765 1 CVE

JFrog Artifactory: Schwachstelle ermöglicht Manipulation von Dateien

Published Aug 5, 2024 · Updated Aug 5, 2024 · de-DE

Vendor: jfrog Product: artifactory Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JFrog Artifactory ausnutzen, um Dateien zu manipulieren.

Product

JFrog Artifactory ist eine universelle DevOps-Lösung.

Vulnerabilities 1

Critical 9.3

CVE-2024-6915

JFrog Artifactory Cache Poisoning

JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.

jfrog artifactory

Aug 5, 2024

Revision history

2024-08-05 #1
Initiale Fassung

References

JFrog Security Advisories vom 2024-08-05
https://jfrog.com/help/r/jfrog-release-information/cve-2024-6915-cache-poisoning
Cybersecurity News vom 2024-08-05
https://securityonline.info/cve-2024-6915-cvss-9-3-jfrog-artifactory-flaw-exposes-software-supply-chains-to-cache-poisoning/