Default Authentication Bypass in Artica Proxy's Rich Filemanager

CVE-2024-2055

What is CVE-2024-2055?

The Rich Filemanager feature in Artica Proxy allows users to manage files through a web interface. However, when this feature is enabled, it does not require any authentication, posing significant security risks. Running under the context of the root user, unauthorized individuals may exploit this vulnerability to access, modify, or delete critical files on the system. This vulnerability highlights the importance of implementing proper authentication measures in web-based file management systems.

References