Lucene search
K

CVE-2017-14706

🗓️ 22 Sep 2017 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.ph

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2017-14706
29 May 201815:50
circl
CNVD
Multiple DenyAll Product Authentication Vulnerabilities
25 Sep 201700:00
cnvd
Check Point Advisories
DenyAll Web Application Firewall Remote Code Execution (CVE-2017-14706)
8 Oct 201700:00
checkpoint_advisories
Cvelist
CVE-2017-14706
22 Sep 201718:00
cvelist
Metasploit
DenyAll Web Application Firewall Remote Code Execution
19 Sep 201711:53
metasploit
NVD
CVE-2017-14706
22 Sep 201718:29
nvd
Prion
Design/Logic Flaw
22 Sep 201718:29
prion
Prion
Authentication flaw
22 Sep 201718:29
prion
RedhatCVE
CVE-2017-14705
22 May 202506:32
redhatcve
RedhatCVE
CVE-2017-14706
22 May 202511:05
redhatcve
Rows per page
ParameterPositionPathDescriptionCWE
applianceUidquery paramwebservices/download/index.phpUnauthenticated retrieval of authentication data (iToken) via debug typeOf=debug on the download endpoint.CWE-287
typeOfquery paramwebservices/download/index.phpUnauthenticated retrieval of authentication data (iToken) via debug typeOf=debug on the download endpoint.CWE-287
iTokenrequest bodywebservices/stream/tail.phpCommand injection vulnerability exploited via iToken on the stream endpoint using POST body parameters.CWE-287
tagrequest bodywebservices/stream/tail.phpCommand injection vulnerability exploited via iToken on the stream endpoint using POST body parameters.CWE-287
stimerequest bodywebservices/stream/tail.phpCommand injection vulnerability exploited via iToken on the stream endpoint using POST body parameters.CWE-287
typerequest bodywebservices/stream/tail.phpCommand injection vulnerability exploited via iToken on the stream endpoint using POST body parameters.CWE-287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
8.4High risk
Vulners AI Score8.4
CVSS 27.5
CVSS 39.8
EPSS0.72371
45