CVE-2018-1000623 : Security Advisory and Response

JFrog Artifactory version prior to 6.0.3, starting from version 4.0.0, is vulnerable to a Directory Traversal exploit through its 'Import Repository from Zip' feature.

Understanding CVE-2018-1000623

This CVE involves a vulnerability in JFrog Artifactory that allows attackers to perform Directory Traversal, file overwrite, and remote code execution.

What is CVE-2018-1000623?

The vulnerability in JFrog Artifactory's 'Import Repository from Zip' feature can be exploited through a vulnerable UI REST endpoint, leading to serious security risks.

The Impact of CVE-2018-1000623

The vulnerability enables attackers with Admin privileges to manipulate files outside the intended directory, potentially compromising the system's integrity.

Technical Details of CVE-2018-1000623

JFrog Artifactory's vulnerability is detailed below:

Vulnerability Description

The vulnerability allows for Directory Traversal, file overwrite, and remote code execution through the 'Import Repository from Zip' feature.

Affected Systems and Versions

JFrog Artifactory versions prior to 6.0.3, starting from version 4.0.0

Exploitation Mechanism

Attackers with Admin privileges exploit the vulnerable UI REST endpoint (/ui/artifactimport/upload) using the 'Zip Slip' vulnerability.

Mitigation and Prevention

Steps to address and prevent exploitation of CVE-2018-1000623:

Immediate Steps to Take

Upgrade JFrog Artifactory to version 6.0.3 or newer.
Restrict Admin privileges to minimize the attack surface.

Long-Term Security Practices

Regularly monitor and audit file operations within the system.
Educate users on secure file handling practices to prevent similar exploits.

Patching and Updates

Apply patches and updates provided by JFrog to ensure system security.