CVE-2016-6501

概要

参考情報

• securityfocus.com/bid/94855
• blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf · Not Applicable
• jfrog.com/confluence/display/RTF/Release+Notes · Release Notes

artifactory のその他の脆弱性

• CVE-2026-82329緊急 9.8悪用確認済み（CISA KEV）JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network …
• CVE-2026-69106高 8.8A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted con…
• CVE-2026-42018高 7.5悪用確認済み（CISA KEV）JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially …
• CVE-2026-70547中 4.3An authenticated user without repository read permission may access package metadata under specific conditions.
• CVE-2026-69107中 5.9An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.