This vulnerability involves missing authorization controls in JFrog Artifactory 7.161.0, allowing a low-privileged authenticated user to access restricted support information. The weakness is categorized under CWE-862, which refers to missing authorization checks. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker with low-level authenticated access can retrieve sensitive support information that should be restricted. This could lead to exposure of confidential data, potentially aiding further attacks or information leakage. There is no impact on integrity or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for unusual access patterns to sensitive support information. Follow vendor communications for updates on patches or mitigations.