Artica Proxy 4.40 / 4.50 Authentication Bypass / Privilege Escalation Vulnerability

The Rich Filemanager feature of Artica Proxy versions 4.40 and 4.50 provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user. This provides an unauthenticated attacker complete access to...

Artica Proxy 4.40 / 4.50 Authentication Bypass / Privilege Escalation

KL-001-2024-003: Artica Proxy Unauthenticated File Manager Vulnerability Title: Artica Proxy Unauthenticated File Manager Vulnerability Advisory ID: KL-001-2024-003 Publication Date: 2024.03.05 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt 1. Vulnerability Detail...

CVE-2024-2055

The Artica Proxy (specifically versions 4.40 and 4.50 running on Debian 10 LTS ) contains a design flaw in its Rich Filemanager feature. When enabled, this feature spawns a listener on port 5000/tcp bound to 0.0.0.0 and operates as the root user without requiring authentication by default. This a...