CVE-2021-46687

Опубликовано: 06 июл. 2022

Источник: nvd

CVSS3: 4.9

CVSS2: 6.8

EPSS Низкий

Описание

JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.

Ссылки

https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
Patch
Vendor Advisory
https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
Vendor Advisory
https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
Patch
Vendor Advisory
https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия от 6.0.0 (включая) до 6.23.38 (исключая)

cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*

Версия от 7.0.0 (включая) до 7.31.10 (исключая)

EPSS

Процентиль: 48%

0.0025

Низкий

4.9 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-359

CWE-668

Связанные уязвимости

GHSA-3f45-mmr7-7f4p