Description
Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.
Remediation
References
Related Vulnerabilities
WordPress Plugin Warranties and Returns for WooCommerce Security Bypass (5.2.1)
MySQL CVE-2018-3082 Vulnerability (CVE-2018-3082)
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999004)
Moment.js Other Vulnerability (CVE-2022-31129)
MediaWiki Uncontrolled Resource Consumption Vulnerability (CVE-2022-39194)