Description
Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jfrog | Artifactory | all – < 6.17.0 | 7.x |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Jfrog Artifactory <6.17.0 - Default Admin Password http/cves/2019/CVE-2019-17444.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.