The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass Most organizations do not think of their artifact repository as a security boundary. It is where build outputs go, and where dependencies come from. When an attacker takes it over, both directions of that pipeline become hostile at once. The vulnerability... Weiterlesen