CVE-2018-19971

JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

• CWE-345

• http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Mar/34Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/107518Third Party Advisory, VDB Entry
• https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#releaseProduct, Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/03/19/3Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/152137/JFrog-Artifactory-Pro-6.5.9-Signature-Validation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Mar/34Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/107518Third Party Advisory, VDB Entry
• https://bintray.com/jfrog/artifactory-pro/jfrog-artifactory-pro-zip/6.5.13#releaseProduct, Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/03/19/3Exploit, Mailing List, Third Party Advisory

Published

Apr 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19966An issue was discovered in Xen through 4.11.x allowing x86 P…
• CVE-2018-19967An issue was discovered in Xen through 4.11.x on Intel x86 p…
• CVE-2018-19968An attacker can exploit phpMyAdmin before 4.8.4 to leak the …
• CVE-2018-19969phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affec…
• CVE-2018-1997IBM Business Automation Workflow and Business Process Manage…4.3
• CVE-2018-19970In phpMyAdmin before 4.8.4, an XSS vulnerability was found i…
• CVE-2018-19974In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19975In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19976In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19977A command injection (missing input validation, escaping) in …
• CVE-2018-19978A buffer overflow vulnerability in the DHCP and PPPOE config…
• CVE-2018-1998IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local u…8.8