CVE-2024-6915: JFrog Artifactory Cache Poisoning
Published Aug 5, 2024
·Updated
JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.
Affected Software
8 affected components
JFrog Artifactory<7.90.6
JFrog Artifactory<7.84.20
JFrog Artifactory<7.77.14
JFrog Artifactory<7.71.23
JFrog Artifactory<7.68.22
JFrog Artifactory<7.63.22
JFrog Artifactory<7.59.23
JFrog Artifactory<7.55.18
Event History
Aug 5, 2024
CVE Published
via MITRE·07:34 PM
Data Sourced
via MITRE·07:34 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-6915?
CVE-2024-6915 is considered a moderate severity vulnerability due to its potential for cache poisoning.
2
How do I fix CVE-2024-6915?
To fix CVE-2024-6915, update JFrog Artifactory to version 7.90.6 or later.
3
Which versions of JFrog Artifactory are affected by CVE-2024-6915?
Versions of JFrog Artifactory below 7.90.6, including 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, and 7.55.18 are affected by CVE-2024-6915.
4
What type of vulnerability is CVE-2024-6915?
CVE-2024-6915 is an Improper Input Validation vulnerability.
5
What impact can CVE-2024-6915 have on my system?
If exploited, CVE-2024-6915 could lead to cache poisoning, affecting the integrity of cached data.