What’s Vulnerable › Vulnerabilities
CVE-2018-19971
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-04-16 · updated 2026-06-17
- Weakness: CWE-345
Description
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
Affected products
- jfrog artifactory: 6.5.9
References
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3
- http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html
- http://seclists.org/fulldisclosure/2019/Mar/34
- http://www.securityfocus.com/bid/107518
- https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#release
- https://lists.openwall.net/full-disclosure/2019/03/19/3
Get alerted when CVE-2018-19971 or the next vulnerability affects your stack