CVE-2019-17444

CRITICAL NUCLEI

Jfrog Artifactory <6.17.0 - Info Disclosure

Title source: llm

Description

Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.

Nuclei Templates (1)

Jfrog Artifactory <6.17.0 - Default Admin Password
CRITICALVERIFIEDby pdteam
Shodan: cpe:"cpe:2.3:a:jfrog:artifactory"

References (2)

Scores

CVSS v3 9.8
EPSS 0.9249
EPSS Percentile 99.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-521
Status published
Products (1)
jfrog/artifactory < 6.17.0
Published Oct 12, 2020
Tracked Since Feb 18, 2026