CVE-2024-51961

There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server. Due to the nature of the files...

CVE-2024-51961 Local file inclusion (LFI) vulnerability in ArcGIS Server

There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server. Due to the nature of the files...

CVE-2024-51961

CVE-2024-51961 affects Esri ArcGIS Server versions 10.9.1 through 11.3. It describes a local file inclusion (LFI) vulnerability where a remote, unauthenticated attacker can craft a URL to read internal files and disclose sensitive configuration information. The underlying issue is insufficient fi...