Another Artifactory CVE under attack by AI agents or humans
Summary
A critical vulnerability in JFrog Artifactory allows unauthenticated attackers to create administrator tokens, granting them full control over the system. This flaw is reportedly being actively exploited by both AI agents and human attackers, with exposed Artifactory servers already targeted.
IFF Assessment
This vulnerability allows for full system compromise, posing a significant threat to defenders.
Severity
The vulnerability allows for Remote Code Execution (RCE) and full system takeover with no authentication required, indicating a critical impact and high exploitability.
Defender Context
This critical vulnerability in Artifactory requires immediate attention for organizations using the software. Defenders should prioritize patching and hardening their Artifactory instances, and actively monitor for signs of exploitation, particularly from AI-driven attacks.