PT-2024-18681
CVE-2024-2056
·
تاريخ النشر
2024-03-05
·
تاريخ التحديث
2024-08-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Artica Proxy (affected versions not specified)
Description
The issue allows services running and bound to the loopback interface on the Artica Proxy to be accessible through the proxy service. Specifically, the
tailon service, which runs as the root user and listens on TCP port 7050, can be used to view the contents of any file on the Artica Proxy. Security issues related to exposing this network service are documented on gvalkov's tailon GitHub repository.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾