Description

In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."

Remediation

References

CVE-2019-19937

Related Vulnerabilities

WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.34)

Java Unspesificed Vulnerability (CVE-2019-2602)

WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) Multiple Vulnerabilities (3.4.1)

MediaWiki Incorrect Authorization Vulnerability (CVE-2022-29906)

MySQL CVE-2013-3811 Vulnerability (CVE-2013-3811)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2019-19937