Vulnerabilities > CVE-2019-19937 - Missing Authorization vulnerability in Jfrog Artifactory

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

NVD

Published: 2020-03-16

Updated: 2021-07-21

Summary

In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."

Vulnerable Configurations

Part	Description	Count
Application	Jfrog Jfrog Artifactory 1.0 Jfrog Artifactory 1.0.1 Jfrog Artifactory 1.0.2 Jfrog Artifactory 1.0.3 Jfrog Artifactory 1.0.4 Jfrog Artifactory 1.0.5 Jfrog Artifactory 1.0.6 Jfrog Artifactory 1.0.7 Jfrog Artifactory 1.1.0 Jfrog Artifactory 1.2.0 Jfrog Artifactory 1.3.0 Jfrog Artifactory 1.3.1 Jfrog Artifactory 1.3.2 Jfrog Artifactory 1.3.3 Jfrog Artifactory 1.3.4 Jfrog Artifactory 1.3.5 Jfrog Artifactory 1.3.6 Jfrog Artifactory 1.4.0 Jfrog Artifactory 1.4.1 Jfrog Artifactory 1.4.2 Jfrog Artifactory 1.4.3 Jfrog Artifactory 1.4.4 Jfrog Artifactory 2.0.0 Jfrog Artifactory 2.0.1 Jfrog Artifactory 2.0.2 Jfrog Artifactory 2.0.3 Jfrog Artifactory 2.0.4 Jfrog Artifactory 2.0.5 Jfrog Artifactory 2.0.6 Jfrog Artifactory 2.0.7 Jfrog Artifactory 2.0.8 Jfrog Artifactory 2.0.9 Jfrog Artifactory 2.1.0 Jfrog Artifactory 2.1.1 Jfrog Artifactory 2.1.2 Jfrog Artifactory 2.1.3 Jfrog Artifactory 2.1.4 Jfrog Artifactory 2.1.5 Jfrog Artifactory 2.1.6 Jfrog Artifactory 2.1.7 Jfrog Artifactory 2.1.8 Jfrog Artifactory 2.2.0 Jfrog Artifactory 2.2.1 Jfrog Artifactory 2.2.2 Jfrog Artifactory 2.2.3 Jfrog Artifactory 2.2.4 Jfrog Artifactory 2.2.5 Jfrog Artifactory 2.2.6 Jfrog Artifactory 2.2.7 Jfrog Artifactory 2.2.7.1 Jfrog Artifactory 2.2.7.1-Snapshot Jfrog Artifactory 2.3.0 Jfrog Artifactory 2.3.1 Jfrog Artifactory 2.3.1-Hap-624 Jfrog Artifactory 2.3.2 Jfrog Artifactory 2.3.3 Jfrog Artifactory 2.3.4 Jfrog Artifactory 2.3.4.1 Jfrog Artifactory 2.4.0 Jfrog Artifactory 2.4.1 Jfrog Artifactory 2.4.2 Jfrog Artifactory 2.4.4 Jfrog Artifactory 2.4.5 Jfrog Artifactory 2.4.6 Jfrog Artifactory 2.4.7 Jfrog Artifactory 2.5.0 Jfrog Artifactory 2.5.1 Jfrog Artifactory 2.5.1.1 Jfrog Artifactory 2.5.2 Jfrog Artifactory 2.6.0 Jfrog Artifactory 2.6.1 Jfrog Artifactory 2.6.2 Jfrog Artifactory 2.6.3 Jfrog Artifactory 2.6.4 Jfrog Artifactory 2.6.5 Jfrog Artifactory 2.6.6 Jfrog Artifactory 2.6.7 Jfrog Artifactory 2.7.0 Jfrog Artifactory 2.7.1 Jfrog Artifactory 2.7.2 Jfrog Artifactory 2.8.0 Jfrog Artifactory 2.8.1 Jfrog Artifactory 2.8.2 Jfrog Artifactory 2.9.0 Jfrog Artifactory 2.9.1 Jfrog Artifactory 2.9.2 Jfrog Artifactory 2.10.0 Jfrog Artifactory 2.10.1 Jfrog Artifactory 2.10.2 Jfrog Artifactory 2.10.3 Jfrog Artifactory 2.10.4 Jfrog Artifactory 2.11.0 Jfrog Artifactory 2.12.0 Jfrog Artifactory 2.12.1 Jfrog Artifactory 2.12.2 Jfrog Artifactory 2.13.0 Jfrog Artifactory 2.13.1 Jfrog Artifactory 2.14.0 Jfrog Artifactory 2.15.0 Jfrog Artifactory 2.15.1 Jfrog Artifactory 2.16.0 Jfrog Artifactory 2.16.1 Jfrog Artifactory 2.16.2 Jfrog Artifactory 3.0.0 Jfrog Artifactory 3.0.1 Jfrog Artifactory 3.0.2 Jfrog Artifactory 3.0.3 Jfrog Artifactory 3.0.4 Jfrog Artifactory 3.1.0 Jfrog Artifactory 3.1.1 Jfrog Artifactory 3.1.2 Jfrog Artifactory 3.2.0 Jfrog Artifactory 3.2.1 Jfrog Artifactory 3.2.2 Jfrog Artifactory 3.2.3 Jfrog Artifactory 3.2.4 Jfrog Artifactory 3.3.0 Jfrog Artifactory 3.3.0.1 Jfrog Artifactory 3.3.1 Jfrog Artifactory 3.3.2 Jfrog Artifactory 3.4.0 Jfrog Artifactory 3.4.1 Jfrog Artifactory 3.4.2 Jfrog Artifactory 3.5.0 Jfrog Artifactory 3.5.1 Jfrog Artifactory 3.5.2 Jfrog Artifactory 3.5.3 Jfrog Artifactory 3.6.0 Jfrog Artifactory 3.6.1 Jfrog Artifactory 3.7.0 Jfrog Artifactory 3.8.0 Jfrog Artifactory 3.9.0 Jfrog Artifactory 3.9.1 Jfrog Artifactory 3.9.2 Jfrog Artifactory 3.9.3 Jfrog Artifactory 3.9.4 Jfrog Artifactory 3.9.5 Jfrog Artifactory 4.0.0 Jfrog Artifactory 4.0.1 Jfrog Artifactory 4.0.2 Jfrog Artifactory 4.1.0 Jfrog Artifactory 4.1.2 Jfrog Artifactory 4.1.3 Jfrog Artifactory 4.2.0 Jfrog Artifactory 4.2.1 Jfrog Artifactory 4.2.2 Jfrog Artifactory 4.3.0 Jfrog Artifactory 4.3.1 Jfrog Artifactory 4.3.2 Jfrog Artifactory 4.3.3 Jfrog Artifactory 4.4.0 Jfrog Artifactory 4.4.1 Jfrog Artifactory 4.4.2 Jfrog Artifactory 4.4.3 Jfrog Artifactory 4.5.0 Jfrog Artifactory 4.5.1 Jfrog Artifactory 4.5.2 Jfrog Artifactory 4.6.0 Jfrog Artifactory 4.6.1 Jfrog Artifactory 4.7.0 Jfrog Artifactory 4.7.1 Jfrog Artifactory 4.7.2 Jfrog Artifactory 4.7.3 Jfrog Artifactory 4.7.4 Jfrog Artifactory 4.7.5 Jfrog Artifactory 4.7.6 Jfrog Artifactory 4.7.7 Jfrog Artifactory 4.8.0 Jfrog Artifactory 4.8.1 Jfrog Artifactory 4.8.2 Jfrog Artifactory 4.9.0 Jfrog Artifactory 4.9.1 Jfrog Artifactory 4.10.0 Jfrog Artifactory 4.11.0 Jfrog Artifactory 4.11.1 Jfrog Artifactory 4.11.2 Jfrog Artifactory 4.12.0.1 Jfrog Artifactory 4.12.1 Jfrog Artifactory 4.12.2 Jfrog Artifactory 4.13.0 Jfrog Artifactory 4.13.1 Jfrog Artifactory 4.13.2 Jfrog Artifactory 4.14.0 Jfrog Artifactory 4.14.1 Jfrog Artifactory 4.14.2 Jfrog Artifactory 4.14.3 Jfrog Artifactory 4.15.0 Jfrog Artifactory 4.16.0 Jfrog Artifactory 4.16.1 Jfrog Artifactory 5.0.0 Jfrog Artifactory 5.0.1 Jfrog Artifactory 5.1.0 Jfrog Artifactory 5.1.2 Jfrog Artifactory 5.1.3 Jfrog Artifactory 5.1.4 Jfrog Artifactory 5.2.0 Jfrog Artifactory 5.2.1 Jfrog Artifactory 5.3.0 Jfrog Artifactory 5.3.1 Jfrog Artifactory 5.3.2 Jfrog Artifactory 5.4.0 Jfrog Artifactory 5.4.1 Jfrog Artifactory 5.4.2 Jfrog Artifactory 5.4.3 Jfrog Artifactory 5.4.4 Jfrog Artifactory 5.4.5 Jfrog Artifactory 5.4.6 Jfrog Artifactory 5.5.0 Jfrog Artifactory 5.5.1 Jfrog Artifactory 5.5.2 Jfrog Artifactory 5.6.0 Jfrog Artifactory 5.6.1 Jfrog Artifactory 5.6.2 Jfrog Artifactory 5.6.3 Jfrog Artifactory 5.6.8 Jfrog Artifactory 5.7.0 Jfrog Artifactory 5.7.1 Jfrog Artifactory 5.7.2 Jfrog Artifactory 5.7.3 Jfrog Artifactory 5.8.0 Jfrog Artifactory 5.8.1 Jfrog Artifactory 5.8.2 Jfrog Artifactory 5.8.3 Jfrog Artifactory 5.8.4 Jfrog Artifactory 5.8.9 Jfrog Artifactory 5.8.10 Jfrog Artifactory 5.8.12 Jfrog Artifactory 5.9.0 Jfrog Artifactory 5.9.1 Jfrog Artifactory 5.9.3 Jfrog Artifactory 5.9.5 Jfrog Artifactory 5.9.7 Jfrog Artifactory 5.9.8 Jfrog Artifactory 5.10.0 Jfrog Artifactory 5.10.1 Jfrog Artifactory 5.10.2 Jfrog Artifactory 5.10.3 Jfrog Artifactory 5.10.4 Jfrog Artifactory 5.10.5 Jfrog Artifactory 5.11.0 Jfrog Artifactory 5.11.1 Jfrog Artifactory 5.11.2 Jfrog Artifactory 5.11.5 Jfrog Artifactory 5.11.6 Jfrog Artifactory 5.11.7 Jfrog Artifactory 5.11.8 Jfrog Artifactory 6.0.0 Jfrog Artifactory 6.0.1 Jfrog Artifactory 6.0.2 Jfrog Artifactory 6.0.3 Jfrog Artifactory 6.0.4 Jfrog Artifactory 6.0.5 Jfrog Artifactory 6.1.0 Jfrog Artifactory 6.1.4 Jfrog Artifactory 6.1.5 Jfrog Artifactory 6.1.6 Jfrog Artifactory 6.2.0 Jfrog Artifactory 6.2.1 Jfrog Artifactory 6.2.2 Jfrog Artifactory 6.3.0 Jfrog Artifactory 6.3.2 Jfrog Artifactory 6.3.3 Jfrog Artifactory 6.3.4 Jfrog Artifactory 6.3.6 Jfrog Artifactory 6.3.7 Jfrog Artifactory 6.3.8 Jfrog Artifactory 6.3.9 Jfrog Artifactory 6.4.0 Jfrog Artifactory 6.4.1 Jfrog Artifactory 6.4.2 Jfrog Artifactory 6.4.3 Jfrog Artifactory 6.5.0 Jfrog Artifactory 6.5.1 Jfrog Artifactory 6.5.2 Jfrog Artifactory 6.5.3 Jfrog Artifactory 6.5.6 Jfrog Artifactory 6.5.8 Jfrog Artifactory 6.5.9 Jfrog Artifactory 6.5.13 Jfrog Artifactory 6.5.15 Jfrog Artifactory 6.5.17 Jfrog Artifactory 6.5.18 Jfrog Artifactory 6.6.0 Jfrog Artifactory 6.6.1 Jfrog Artifactory 6.6.3 Jfrog Artifactory 6.6.5 Jfrog Artifactory 6.6.8 Jfrog Artifactory 6.6.10 Jfrog Artifactory 6.7.0 Jfrog Artifactory 6.7.1 Jfrog Artifactory 6.7.2 Jfrog Artifactory 6.7.3 Jfrog Artifactory 6.7.5 Jfrog Artifactory 6.7.7 Jfrog Artifactory 6.7.8 Jfrog Artifactory 6.8.0 Jfrog Artifactory 6.8.1 Jfrog Artifactory 6.8.2 Jfrog Artifactory 6.8.3 Jfrog Artifactory 6.8.4 Jfrog Artifactory 6.8.6 Jfrog Artifactory 6.8.7 Jfrog Artifactory 6.8.9 Jfrog Artifactory 6.8.12 Jfrog Artifactory 6.8.14 Jfrog Artifactory 6.8.15 Jfrog Artifactory 6.8.16 Jfrog Artifactory 6.8.17 Jfrog Artifactory 6.9.0 Jfrog Artifactory 6.9.1 Jfrog Artifactory 6.9.2 Jfrog Artifactory 6.9.3 Jfrog Artifactory 6.9.4 Jfrog Artifactory 6.9.5 Jfrog Artifactory 6.9.6 Jfrog Artifactory 6.10.0 Jfrog Artifactory 6.10.1 Jfrog Artifactory 6.10.2 Jfrog Artifactory 6.10.3 Jfrog Artifactory 6.10.4 Jfrog Artifactory 6.10.6 Jfrog Artifactory 6.10.7 Jfrog Artifactory 6.10.9 Jfrog Artifactory 6.11.0 Jfrog Artifactory 6.11.1 Jfrog Artifactory 6.11.3 Jfrog Artifactory 6.11.6 Jfrog Artifactory 6.11.7 Jfrog Artifactory 6.12.0 Jfrog Artifactory 6.12.1 Jfrog Artifactory 6.12.2 Jfrog Artifactory 6.12.3 Jfrog Artifactory 6.13.0 Jfrog Artifactory 6.13.1 Jfrog Artifactory 6.13.2 Jfrog Artifactory 6.14.0 Jfrog Artifactory 6.14.1 Jfrog Artifactory 6.14.2 Jfrog Artifactory 6.15.0 Jfrog Artifactory 6.15.1 Jfrog Artifactory 6.16 Jfrog Artifactory 6.16.1 Jfrog Artifactory 6.16.2 Jfrog Artifactory 6.17 Jfrog Artifactory 6.17.0 Jfrog Artifactory 6.17.1 Jfrog Artifactory 6.17.2	384

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.