CVE-2019-17444 — JFrog Artifactory does not enforce default admin password change
Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based at…
Published: 2020-10-12 · CVSS: 9.8 · CVSS 3.1
Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7