CVE-2024-2055 Artica Proxy Unauthenticated File Manager Vulnerability

2024-03-0518:56:33

CWE-552

CWE-288

AHA

www.cve.org

artica proxy

file manager

web-based interface

authentication

root user

vulnerability

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

The “Rich Filemanager” feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Artica Proxy",
    "vendor": "Artica Tech",
    "versions": [
      {
        "status": "affected",
        "version": "4.50"
      },
      {
        "status": "affected",
        "version": "4.40"
      }
    ]
  }
]