H3-2022-0056¶

Anonymous Deployment Privileges in JFrog Artifactory

Description¶

JFrog Artifactory is a repository manager that supports all available software package types, enabling automated continuous integration and delivery.

Impact¶

Unauthenticated attackers can deploy files to repositories.

References¶

• Attacking Artifactory
• JFrog Knowledge base
• MITRE ATT&CK Technique: T1213.003: Data from Information Repositories: Code Repositories