CVE-2024-2056criticalCWE-288CWE-552

CVE-2024-2056: falha crítica em Artica Proxy

Artica Proxy Loopback Services Remotely Accessible Unauthenticated

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Artica Proxy+ Monitorar github.com/gvalkov/tailon

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 17%
Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Artica Tech · Artica Proxy
CVEs relacionadas — Artica Proxy

No mesmo produto, das mais perigosas para as menos.

CVE-2024-2054CRITICALArtica Proxy Unauthenticated PHP Deserialization VulnerabilityEPSS 81.3%CVE-2024-2053HIGHArtica Proxy Unauthenticated LFI Protection Bypass VulnerabilityEPSS 44.6%CVE-2024-2055CRITICALArtica Proxy Unauthenticated File Manager VulnerabilityEPSS 0.9%