CVE-2024-2055

T

he "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.

References
Link Resource
http://seclists.org/fulldisclosure/2024/Mar/13 Mailing List Third Party Advisory Exploit
https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt Third Party Advisory Exploit
http://seclists.org/fulldisclosure/2024/Mar/13 Mailing List Third Party Advisory Exploit
https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt Third Party Advisory Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:articatech:artica_proxy:4.40.000000:*:*:*:*:*:*:*
cpe:2.3:a:articatech:artica_proxy:4.50.000000:*:*:*:*:*:*:*

History

12 Jan 2026, 15:45

Type Values Removed Values Added
First Time Articatech artica Proxy
Articatech
References () http://seclists.org/fulldisclosure/2024/Mar/13 - () http://seclists.org/fulldisclosure/2024/Mar/13 - Mailing List, Third Party Advisory, Exploit
References () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - Third Party Advisory, Exploit
CPE cpe:2.3:a:articatech:artica_proxy:4.40.000000:*:*:*:*:*:*:*
cpe:2.3:a:articatech:artica_proxy:4.50.000000:*:*:*:*:*:*:*

21 Nov 2024, 09:08

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Mar/13 - () http://seclists.org/fulldisclosure/2024/Mar/13 -
References () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt -

26 Aug 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

Information

Published : 2024-03-05 20:16

Updated : 2026-01-12 15:45


NVD link : CVE-2024-2055

Mitre link : CVE-2024-2055

CVE.ORG link : CVE-2024-2055


JSON object : View

Products Affected
CWE
CWE-288

Authentication Bypass Using an Alternate Path or Channel

CWE-552

Files or Directories Accessible to External Parties