CVE-2023-42509: JFrog Artifactory Sensitive Data Leakage in Repository configuration process
Published Mar 7, 2024
·Updated
JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data.
Affected Software
2 affected components
JFrog Artifactory>7.17.4<=7.77.0
JFrog Artifactory>=7.17.4<7.77.0
Event History
Mar 7, 2024
CVE Published
via MITRE·02:07 PM
Data Sourced
via MITRE·02:07 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-42509?
CVE-2023-42509 is considered a medium-severity vulnerability due to the risk of sensitive data exposure.
2
How do I fix CVE-2023-42509?
To mitigate CVE-2023-42509, upgrade JFrog Artifactory to version 7.77.0 or later.
3
What versions of JFrog Artifactory are affected by CVE-2023-42509?
CVE-2023-42509 affects JFrog Artifactory versions later than 7.17.4 and prior to 7.77.0.
4
What type of data is exposed by CVE-2023-42509?
CVE-2023-42509 may expose sensitive configuration data due to improperly handled exceptions.
5
Can CVE-2023-42509 be exploited remotely?
Yes, CVE-2023-42509 can potentially be exploited remotely if the affected versions of JFrog Artifactory are exposed to the internet.