Yüksek CVSS 8.8
CVE-2026-66014: Artifactory: hatalı kimlik doğrulama
Açıklama (NVD)
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
Özet bilgiler
- Ürün
- Jfrog Artifactory
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,64 (yüzdelik 51)
- CWE
- CWE-287
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| jfrog-artifactory | — | — | 7.111.18 |
| jfrog-artifactory | 7.117.0 | — | 7.117.25 |
| jfrog-artifactory | 7.125.0 | — | 7.125.18 |
| jfrog-artifactory | 7.133.0 | — | 7.133.27 |
| jfrog-artifactory | 7.146.0 | — | 7.146.34 |
| jfrog-artifactory | 7.161.0 | — | 7.161.15 |