This could potentially allow the attacker to gain access to any user in Artifactory. Under certain circumstances, an unauthorized user may be able to send malformed REST API calls to Artifactory that execute under the identity of another user.ĥ.6.8, 5.7.3, 5.8.12, 5.9.8, 5.10.5, 5.11.5Ī SAML-related authentication vulnerability potentially exposed Artifactory to XSW attacks which could sniff and manipulate SAML communications causing the incorrect verification of a SAML login response. Under certain circumstances, users could gain access to application data that should otherwise be exposed only to administrators. Deploy binaries to Artifactory from different upstreams without having adequate permissions to perform these actions.Ħ.13.3, 6.14.4, 6.15.2, 6.16.2, 6.17.1, 6.18.1, 7.3.2.Retrieve environment information from Artifactory that normally required administrative rights.Under certain circumstances, authenticated users were able to: Upgraded maven-shared-utils:3.2.1 to version 334. Upgraded to wiremock-jre8 version 2.28.0. Updated jackson-dataformats-binary to version 2.12.3.

Upgraded :xnio-nio to version 3.8.4.Final. Updated to the latest release of Koplin from version 1.3.50 to 1.5.20. Upgraded the validator version to 13.6.0. Upgraded internal/language/parse.go version 0.3.6 to version 0.3.7. Upgraded the google-oauth-client to version 1.33.3.

Apache ant log4j vulnerability