CVE-2020-7931

Опубликовано: 23 янв. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template.

Ссылки

https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0006.md
Exploit
Third Party Advisory
https://www.jfrog.com/confluence/display/RTF/Release+Notes
Release Notes
Vendor Advisory
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0006.md
Exploit
Third Party Advisory
https://www.jfrog.com/confluence/display/RTF/Release+Notes
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия до 5.11.8 (исключая)

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия от 6.0.0 (включая) до 6.1.6 (исключая)

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия от 6.2.0 (включая) до 6.3.9 (исключая)

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия от 6.4.0 (включая) до 6.7.8 (исключая)