Recent reports from cloud security firm Wiz have revealed that cybercriminals successfully exploited two vulnerabilities within JFrog Artifactory, a popular repository for software build pipelines. This exploitation allowed them to gain administrative access to self-hosted servers and install backdoors. The attacks were observed between mid-August and early September. Fortunately, JFrog had addressed these vulnerabilities prior to the attacks, meaning that only those servers that had not yet implemented the updates were at risk. Organizations using JFrog Artifactory are urged to ensure their systems are up to date to prevent such security breaches.
Exploiting JFrog Artifactory Vulnerabilities for Admin Access and Backdoor Installation
Cyber attackers have exploited vulnerabilities in JFrog Artifactory to gain unauthorized admin access and deploy backdoors on unpatched servers.
3 min readCybersecurity