CVE-2023-30803criticalCWE-290

CVE-2023-30803: critical vulnerability in Sangfor Net-Gen Application Firewall

Sangfor Next-Gen Application Firewall Authentication Bypass

Published · Updated

Follow this CVE+ Monitor Net-Gen Application Firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

53Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 21%
In short

The Sangfor Next-Gen Application Firewall contains a critical flaw that allows remote attackers to completely bypass authentication by using a specially crafted HTTP header, gaining unauthorized access to administrative features without needing valid credentials.

Technical detail

CWE-290: Improper Authentication; attackers exploit improper header validation in the Y-forwarded-for mechanism to bypass authentication controls and access administrative functionality remotely without credentials. Requires only network access to affected NGAF 8.0.17 instances.

Summary generated and translated by AI from the official description.
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Sangfor · Net-Gen Application Firewall
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Sangfor Net-Gen Application Firewall

In the same product, most dangerous first.

CVE-2023-30806CRITICALSangfor Next-Gen Application Firewall PHPSESSID Command InjectionEPSS 65.0%CVE-2023-30805CRITICALSangfor Next-Gen Application Firewall Login Un Param Command InjectionEPSS 65.0%CVE-2023-30802MEDIUMSangfor Next-Gen Application Firewall Source Code DisclosureEPSS 0.8%