CVE-2024-2055

2 known exploits for CVE-2024-2055

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

Affected products: Artica Proxy
Articatech Artica Proxy: = 4.40.000000, 4.50.000000

CVSS 3.1: 9.8 CRITICAL
EPSS: 0.9% (58th percentile)
Weakness: CWE-288, CWE-552
NVD status: Analyzed
Published: 2024-03-05

CVE-2024-2055 at NVD

Authoritative description, scoring and affected products

Artica Proxy 4.40 / 4.50 Authentication Bypass / Privilege Escalation Vulnerability

2024-03-06 Jim BecherZDT

Artica Proxy 4.40 / 4.50 Authentication Bypass / Privilege Escalation

2024-03-06 Jim Becher, korelogic.comPACKETSTORM