CVE-2021-45730 — JFrog / Artifactory

CVE-2021-45730

JFrog / Artifactory PUBLISHED

Description (CNA)

JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators.

Affected (CNA)

Vendor / product	Versions
JFrog / Artifactory	affected 7.x before 7.31.10

CWE

CWE-284

References

https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45730%3A+Artifactory+Broken+Access+Control+on+Repository+Layouts+Configuration

ADP enrichment

CVE

No English description supplied.

https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45730%3A+Artifactory+Broken+Access+Control+on+Repository+Layouts+Configuration