Artica Proxy
Approved changes feed: RSS · Atom
cpe:2.3:a:articatech:artica_proxy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Articatech (c0f4fb44-71ab-5380-b611-e0cde633c50d) |
|---|---|
| Product | Artica Proxy (cc07a95e-ca4d-5fbc-bd39-ec5469b0081e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-66745 |
vulnerable | 2026-09-16 04:32:55.177491 |
Artica Proxy 4.50 Session Fixation via fw.login.php
HIGH (7.5)
Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controlled session identifier and wait for a victim to authenticate through fw.login.php, after which the attacker gains a fully authenticated administrative session on port 9000.
Published: 2026-07-28T18:10:46.904Z
Updated: 2026-08-14T16:50:44.621Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2056 |
vulnerable | 2026-06-08 06:33:30.256627 |
Artica Proxy Loopback Services Remotely Accessible Unauthenticated
Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.
Published: 2024-03-05T18:57:03.524Z
Updated: 2025-02-13T17:32:34.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2055 |
vulnerable | 2026-06-08 06:33:30.255807 |
Artica Proxy Unauthenticated File Manager Vulnerability
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.
Published: 2024-03-05T18:56:33.232Z
Updated: 2025-02-13T17:32:34.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17055 |
vulnerable | 2026-06-08 05:09:07.786028 |
Details available
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
Published: 2017-12-06T16:00:00.000Z
Updated: 2024-08-05T20:43:59.554Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.