CVE-2024-2056

2024-03-0520:16:01

CWE-288

CWE-552

[email protected]

web.nvd.nist.gov

artica proxy

service access

network security

loopback interface

tailon

github

root user

tcp port 7050

nvd

cve-2024-2056

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.3%

JSON

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the “tailon” service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov’s ‘tailon’ GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Artica Proxy",
    "vendor": "Artica Tech",
    "versions": [
      {
        "status": "affected",
        "version": "4.50"
      }
    ]
  }
]