Vulnerabilities > CVE-2021-41834 - Unspecified vulnerability in Jfrog Artifactory

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

jfrog

NVD

Published: 2022-05-23

Updated: 2022-08-09

Summary

JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-privileged user to read and copy any artifact that exists in the Artifactory deployment due to improper permissions validation.

Vulnerable Configurations

Part	Description	Count
Application	Jfrog Jfrog Artifactory 7.0.0 Jfrog Artifactory 7.0.1 Jfrog Artifactory 7.0.2 Jfrog Artifactory 7.1.0 Jfrog Artifactory 7.2.0 Jfrog Artifactory 7.2.1 Jfrog Artifactory 7.3.0 Jfrog Artifactory 7.3.1 Jfrog Artifactory 7.3.2 Jfrog Artifactory 7.4.0 Jfrog Artifactory 7.4.1 Jfrog Artifactory 7.4.3 Jfrog Artifactory 7.5.0 Jfrog Artifactory 7.5.5 Jfrog Artifactory 7.6.0 Jfrog Artifactory 7.6.1 Jfrog Artifactory 7.6.2 Jfrog Artifactory 7.6.3 Jfrog Artifactory 7.7.0 Jfrog Artifactory 7.7.3 Jfrog Artifactory 7.7.6 Jfrog Artifactory 7.7.8 Jfrog Artifactory 7.8.1 Jfrog Artifactory 7.9.0 Jfrog Artifactory 7.9.1 Jfrog Artifactory 7.9.2 Jfrog Artifactory 7.10.1 Jfrog Artifactory 7.10.2 Jfrog Artifactory 7.10.5 Jfrog Artifactory 7.10.6 Jfrog Artifactory 7.11.1 Jfrog Artifactory 7.11.2 Jfrog Artifactory 7.11.5 Jfrog Artifactory 7.11.7 Jfrog Artifactory 7.11.8 Jfrog Artifactory 7.12.3 Jfrog Artifactory 7.12.6 Jfrog Artifactory 7.12.8 Jfrog Artifactory 7.12.9 Jfrog Artifactory 7.12.10 Jfrog Artifactory 7.15.3 Jfrog Artifactory 7.15.4 Jfrog Artifactory 7.15.5 Jfrog Artifactory 7.16.3 Jfrog Artifactory 7.16.6 Jfrog Artifactory 7.17.4 Jfrog Artifactory 7.17.5 Jfrog Artifactory 7.17.9 Jfrog Artifactory 7.17.11 Jfrog Artifactory 7.17.12 Jfrog Artifactory 7.17.13 Jfrog Artifactory 7.17.14 Jfrog Artifactory 7.18.3 Jfrog Artifactory 7.18.5 Jfrog Artifactory 7.18.6 Jfrog Artifactory 7.18.7 Jfrog Artifactory 7.18.9 Jfrog Artifactory 7.18.11 Jfrog Artifactory 7.19.4 Jfrog Artifactory 7.19.6 Jfrog Artifactory 7.19.8 Jfrog Artifactory 7.19.9 Jfrog Artifactory 7.19.10 Jfrog Artifactory 7.19.12 Jfrog Artifactory 7.21.3 Jfrog Artifactory 7.21.5 Jfrog Artifactory 7.21.7 Jfrog Artifactory 7.21.8 Jfrog Artifactory 7.21.12 Jfrog Artifactory 7.21.13 Jfrog Artifactory 7.21.20 Jfrog Artifactory 7.23.3 Jfrog Artifactory 7.23.4 Jfrog Artifactory 7.23.5 Jfrog Artifactory 7.23.7 Jfrog Artifactory 7.23.8 Jfrog Artifactory 7.24.1 Jfrog Artifactory 7.24.3 Jfrog Artifactory 7.24.4 Jfrog Artifactory 7.24.6 Jfrog Artifactory 7.24.7 Jfrog Artifactory 7.25.4 Jfrog Artifactory 7.25.5 Jfrog Artifactory 7.25.6 Jfrog Artifactory 7.25.7 Jfrog Artifactory 7.26.3 Jfrog Artifactory 7.27.3 Jfrog Artifactory 7.27.6 Jfrog Artifactory 7.27.7 Jfrog Artifactory 7.27.9 Jfrog Artifactory 7.27.10 Jfrog Artifactory 1.3.0 Jfrog Artifactory 2.1.1 Jfrog Artifactory 2.1.2 Jfrog Artifactory 2.1.3 Jfrog Artifactory 2.2.0 Jfrog Artifactory 2.2.1 Jfrog Artifactory 2.2.2 Jfrog Artifactory 2.2.3 Jfrog Artifactory 2.2.4 Jfrog Artifactory 2.2.5 Jfrog Artifactory 2.3.0 Jfrog Artifactory 2.3.1 Jfrog Artifactory 2.3.2 Jfrog Artifactory 2.3.3 Jfrog Artifactory 2.3.4 Jfrog Artifactory 2.3.4.1 Jfrog Artifactory 2.4.0 Jfrog Artifactory 2.4.1 Jfrog Artifactory 2.4.2 Jfrog Artifactory 2.5.0 Jfrog Artifactory 2.5.1 Jfrog Artifactory 2.5.1.1 Jfrog Artifactory 2.5.2 Jfrog Artifactory 2.6.0 Jfrog Artifactory 2.6.1 Jfrog Artifactory 2.6.2 Jfrog Artifactory 2.6.3 Jfrog Artifactory 2.6.4 Jfrog Artifactory 2.6.5 Jfrog Artifactory 2.6.6 Jfrog Artifactory 2.6.7 Jfrog Artifactory 3.0.0 Jfrog Artifactory 3.0.1 Jfrog Artifactory 3.0.2 Jfrog Artifactory 3.0.3 Jfrog Artifactory 3.0.4 Jfrog Artifactory 3.1.0 Jfrog Artifactory 3.1.1 Jfrog Artifactory 3.2.0 Jfrog Artifactory 3.2.1 Jfrog Artifactory 3.2.2 Jfrog Artifactory 3.3.0 Jfrog Artifactory 3.3.0.1 Jfrog Artifactory 3.3.1 Jfrog Artifactory 3.4.0 Jfrog Artifactory 3.4.1 Jfrog Artifactory 3.4.2 Jfrog Artifactory 3.5.0 Jfrog Artifactory 3.5.1 Jfrog Artifactory 3.5.2 Jfrog Artifactory 3.5.3 Jfrog Artifactory 3.6.0 Jfrog Artifactory 3.7.0 Jfrog Artifactory 3.8.0 Jfrog Artifactory 3.9.0 Jfrog Artifactory 3.9.1 Jfrog Artifactory 3.9.2 Jfrog Artifactory 3.9.3 Jfrog Artifactory 3.9.4 Jfrog Artifactory 3.9.5 Jfrog Artifactory 4.0.0 Jfrog Artifactory 4.0.1 Jfrog Artifactory 4.0.2 Jfrog Artifactory 4.1.0 Jfrog Artifactory 4.1.2 Jfrog Artifactory 4.1.3 Jfrog Artifactory 4.2.0 Jfrog Artifactory 4.2.1 Jfrog Artifactory 4.2.2 Jfrog Artifactory 4.3.0 Jfrog Artifactory 4.3.1 Jfrog Artifactory 4.3.2 Jfrog Artifactory 4.3.3 Jfrog Artifactory 4.4.0 Jfrog Artifactory 4.4.1 Jfrog Artifactory 4.4.2 Jfrog Artifactory 4.4.3 Jfrog Artifactory 4.5.0 Jfrog Artifactory 4.5.1 Jfrog Artifactory 4.5.2 Jfrog Artifactory 4.6.0 Jfrog Artifactory 4.6.1 Jfrog Artifactory 4.7.0 Jfrog Artifactory 4.7.1 Jfrog Artifactory 4.7.2 Jfrog Artifactory 4.7.3 Jfrog Artifactory 4.7.4 Jfrog Artifactory 4.7.5 Jfrog Artifactory 4.7.6 Jfrog Artifactory 4.7.7 Jfrog Artifactory 4.8.0 Jfrog Artifactory 4.8.1 Jfrog Artifactory 4.8.2 Jfrog Artifactory 4.9.0 Jfrog Artifactory 4.9.1 Jfrog Artifactory 4.10.0 Jfrog Artifactory 4.11.0 Jfrog Artifactory 4.11.1 Jfrog Artifactory 4.11.2 Jfrog Artifactory 4.12.0.1 Jfrog Artifactory 4.12.1 Jfrog Artifactory 4.12.2 Jfrog Artifactory 4.13.0 Jfrog Artifactory 4.13.1 Jfrog Artifactory 4.13.2 Jfrog Artifactory 4.14.0 Jfrog Artifactory 4.14.1 Jfrog Artifactory 4.14.2 Jfrog Artifactory 4.14.3 Jfrog Artifactory 4.15.0 Jfrog Artifactory 4.16.0 Jfrog Artifactory 4.16.1 Jfrog Artifactory 5.0.0 Jfrog Artifactory 5.0.1 Jfrog Artifactory 5.1.0 Jfrog Artifactory 5.1.2 Jfrog Artifactory 5.1.3 Jfrog Artifactory 5.1.4 Jfrog Artifactory 5.2.0 Jfrog Artifactory 5.2.1 Jfrog Artifactory 5.3.0 Jfrog Artifactory 5.3.1 Jfrog Artifactory 5.3.2 Jfrog Artifactory 5.4.0 Jfrog Artifactory 5.4.1 Jfrog Artifactory 5.4.2 Jfrog Artifactory 5.4.3 Jfrog Artifactory 5.4.4 Jfrog Artifactory 5.4.5 Jfrog Artifactory 5.4.6 Jfrog Artifactory 5.5.0 Jfrog Artifactory 5.5.1 Jfrog Artifactory 5.5.2 Jfrog Artifactory 5.6.0 Jfrog Artifactory 5.6.1 Jfrog Artifactory 5.6.2 Jfrog Artifactory 5.6.3 Jfrog Artifactory 5.6.8 Jfrog Artifactory 5.7.0 Jfrog Artifactory 5.7.1 Jfrog Artifactory 5.7.2 Jfrog Artifactory 5.7.3 Jfrog Artifactory 5.8.0 Jfrog Artifactory 5.8.1 Jfrog Artifactory 5.8.2 Jfrog Artifactory 5.8.3 Jfrog Artifactory 5.8.4 Jfrog Artifactory 5.8.9 Jfrog Artifactory 5.8.10 Jfrog Artifactory 5.8.12 Jfrog Artifactory 5.9.0 Jfrog Artifactory 5.9.1 Jfrog Artifactory 5.9.3 Jfrog Artifactory 5.9.5 Jfrog Artifactory 5.9.7 Jfrog Artifactory 5.9.8 Jfrog Artifactory 5.10.0 Jfrog Artifactory 5.10.1 Jfrog Artifactory 5.10.2 Jfrog Artifactory 5.10.3 Jfrog Artifactory 5.10.4 Jfrog Artifactory 5.10.5 Jfrog Artifactory 5.11.0 Jfrog Artifactory 5.11.1 Jfrog Artifactory 5.11.2 Jfrog Artifactory 5.11.5 Jfrog Artifactory 5.11.6 Jfrog Artifactory 5.11.7 Jfrog Artifactory 5.11.8 Jfrog Artifactory 6.0.0 Jfrog Artifactory 6.0.1 Jfrog Artifactory 6.0.2 Jfrog Artifactory 6.0.3 Jfrog Artifactory 6.0.4 Jfrog Artifactory 6.0.5 Jfrog Artifactory 6.1.0 Jfrog Artifactory 6.1.4 Jfrog Artifactory 6.1.5 Jfrog Artifactory 6.1.6 Jfrog Artifactory 6.2.0 Jfrog Artifactory 6.2.1 Jfrog Artifactory 6.2.2 Jfrog Artifactory 6.3.0 Jfrog Artifactory 6.3.2 Jfrog Artifactory 6.3.3 Jfrog Artifactory 6.3.4 Jfrog Artifactory 6.3.6 Jfrog Artifactory 6.3.7 Jfrog Artifactory 6.3.8 Jfrog Artifactory 6.3.9 Jfrog Artifactory 6.4.0 Jfrog Artifactory 6.4.1 Jfrog Artifactory 6.4.2 Jfrog Artifactory 6.4.3 Jfrog Artifactory 6.5.0 Jfrog Artifactory 6.5.1 Jfrog Artifactory 6.5.2 Jfrog Artifactory 6.5.3 Jfrog Artifactory 6.5.6 Jfrog Artifactory 6.5.8 Jfrog Artifactory 6.5.9 Jfrog Artifactory 6.5.13 Jfrog Artifactory 6.5.15 Jfrog Artifactory 6.5.17 Jfrog Artifactory 6.5.18 Jfrog Artifactory 6.6.0 Jfrog Artifactory 6.6.1 Jfrog Artifactory 6.6.3 Jfrog Artifactory 6.6.5 Jfrog Artifactory 6.6.8 Jfrog Artifactory 6.6.10 Jfrog Artifactory 6.7.0 Jfrog Artifactory 6.7.1 Jfrog Artifactory 6.7.2 Jfrog Artifactory 6.7.3 Jfrog Artifactory 6.7.5 Jfrog Artifactory 6.7.7 Jfrog Artifactory 6.7.8 Jfrog Artifactory 6.16.1 Jfrog Artifactory 6.16.2 Jfrog Artifactory 6.17.0 Jfrog Artifactory 6.17.1 Jfrog Artifactory 6.17.2 Jfrog Artifactory 6.18 Jfrog Artifactory 6.18.1 Jfrog Artifactory 6.18.5 Jfrog Artifactory 6.19.1 Jfrog Artifactory 6.19.3 Jfrog Artifactory 6.20.1 Jfrog Artifactory 6.20.4 Jfrog Artifactory 6.22.2 Jfrog Artifactory 6.23.1 Jfrog Artifactory 6.23.3 Jfrog Artifactory 6.23.7 Jfrog Artifactory 6.23.13 Jfrog Artifactory 6.23.15 Jfrog Artifactory 6.23.16 Jfrog Artifactory 6.23.18 Jfrog Artifactory 6.23.19 Jfrog Artifactory 6.23.21 Jfrog Artifactory 6.23.23 Jfrog Artifactory 6.23.25 Jfrog Artifactory 6.23.28 Jfrog Artifactory 6.23.31 Jfrog Artifactory 6.23.33 Jfrog Artifactory 6.23.36 Jfrog Artifactory 6.23.37	344

References

https://www.jfrog.com/confluence/display/JFROG/CVE-2021-41834%3A+Artifactory+Broken+Access+Control+on+Copy+Artifact