CVE-2024-2055 Artica Proxy Unauthenticated File Manager Vulnerability

2024-03-0518:56:33

CWE-288

CWE-552

AHA

github.com

cve

artica proxy

file manager

authentication

root user

AI Score

7.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

The “Rich Filemanager” feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:articatech:artica_proxy:*:*:*:*:*:*:*:*"
    ],
    "vendor": "articatech",
    "product": "artica_proxy",
    "versions": [
      {
        "status": "affected",
        "version": "4.50"
      },
      {
        "status": "affected",
        "version": "4.40"
      }
    ],
    "defaultStatus": "unknown"
  }
]