CVE-2018-19971

Description

References

• packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.html · Exploit
• seclists.org/fulldisclosure/2019/Mar/34 · Exploit
• securityfocus.com/bid/107518 · Third Party Advisory
• bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13 · Product
• lists.openwall.net/full-disclosure/2019/03/19/3 · Exploit

Altre vulnerabilità di artifactory

• CVE-2026-82329CRITICO 9.8EXPLOITED (CISA KEV)JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network …
• CVE-2026-69106ALTO 8.8A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted con…
• CVE-2026-42018ALTO 7.5EXPLOITED (CISA KEV)JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially …
• CVE-2026-70547MEDIO 4.3An authenticated user without repository read permission may access package metadata under specific conditions.
• CVE-2026-69107MEDIO 5.9An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.