CVE-2024-37694

Name of the Vulnerable Software and Affected Versions ArcGIS Enterprise Server version 10.8.0

Description The issue allows a remote attacker to obtain sensitive information because the "/arcgis/rest/services" endpoint does not require authentication.

Recommendations For ArcGIS Enterprise Server version 10.8.0, consider restricting access to the "/arcgis/rest/services" endpoint to require authentication until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.