Skip to main content

Artica Proxy CVE-2024-2055

CRITICAL
Authentication Bypass Using an Alternate Path or Channel (CWE-288)
2024-03-05 cve@takeonme.org
Information Disclosure Artica Proxy
9.8
CVSS 3.1 · Vendor: takeonme
Share

Severity by source

Vendor (takeonme) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (takeonme) · only source for this CVE.

CVSS VectorVendor: takeonme

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 05, 2024 - 20:16 cve.org
CRITICAL 9.8

DescriptionCVE.org

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

AnalysisAI

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-288. The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user. Affected products include: Articatech Artica Proxy.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Artica Proxy

View all
CVE-2024-2054 CRITICAL POC
9.8 Mar 21

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users
CVE-2024-2056 CRITICAL POC
9.8 Mar 05

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy servi
CVE-2020-13159 CRITICAL POC
9.8 Jun 22

Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name,

CVE-2017-17055 CRITICAL POC
9.0 Dec 07

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site
CVE-2024-2053 HIGH POC
7.5 Mar 21

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users
CVE-2020-15052 HIGH POC
7.5 Jul 20

An issue was discovered in Artica Proxy CE before 4.28.030.418. Rated high severity (CVSS 7.5), this vulnerability is re
CVE-2020-13158 HIGH POC
7.5 Jun 22

Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parame
CVE-2020-10818 HIGH POC
7.2 Mar 22

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the

CVE-2019-7300 HIGH POC
7.2 Feb 01

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/setting
CVE-2022-37153 MEDIUM POC
6.1 Aug 24

An issue was discovered in Artica Proxy 4.30.000000. Rated medium severity (CVSS 6.1), this vulnerability is remotely ex
CVE-2020-15053 MEDIUM POC
6.1 Jul 20

An issue was discovered in Artica Proxy CE before 4.28.030.418. Rated medium severity (CVSS 6.1), this vulnerability is

CVE-2020-15051 MEDIUM POC
6.1 Jul 15

An issue was discovered in Artica Proxy before 4.30.000000. Rated medium severity (CVSS 6.1), this vulnerability is remo

Same weakness CWE-288 – Authentication Bypass Using an Alternate Path or Channel

View all
CVE-2024-1709 CRITICAL POC
10.0
CVE-2020-10148 CRITICAL POC
9.8
CVE-2024-55591 CRITICAL POC
9.8
CVE-2025-2747 CRITICAL POC
9.8
CVE-2025-2746 CRITICAL POC
9.8
CVE-2025-4427 MEDIUM POC
5.3
CVE-2025-34026 CRITICAL POC
9.2
CVE-2026-23760 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-2055 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy