Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have exploited two vulnerabilities in JFrog Artifactory to gain administrator control and install backdoors on self-hosted servers. This was achieved by chaining the two flaws together. The attacks were observed between August 15 and September 8. The vulnerabilities had been previously fixed by JFrog, meaning only unupdated servers were susceptible to the attacks. The exploitation allowed attackers to take control of the servers and plant backdoors.