Detections
Analytics

JFrog Artifactory Artifacts Repository Detected

medium Web App Scanning Plugin ID 115095

Language:

Synopsis

JFrog Artifactory Artifacts Repository Detected

Description

JFrog Artifactory is a popular repository management tool used to store and manage software artifacts. If the Artifacts repository is detected and accessible, it may expose sensitive information or allow unauthorized access to stored artifacts.

Solution

If the application is not expected to be public, disable anonymous access in the Artifactory administration settings. Alternatively, restrict access using network access controls (ACLs) or web server configuration (e.g., .htaccess for Apache, allow/deny for Nginx) to limit access to known IP addresses.

See Also

https://jfrog.com/help/r/jfrog-rest-apis/artifactory-rest-apis

Plugin Details

Severity: Medium

ID: 115095

Type: remote

Published: 1/5/2026

Updated: 1/5/2026

Scan Template: basic, full, pci, scan

Risk Information

VPR

Risk Factor: Low

Score: 2.2

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS Score Source: Tenable

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS Score Source: Tenable

CVSS v4

Risk Factor: Medium

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS Score Source: Tenable

Vulnerability Information

CPE: cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:*

Reference Information