PT-2020-5817 · Artica · Artica Web Proxy

Published 2020-08-12 · Updated 2022-11-21 · CVE-2020-17506

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Artica Web Proxy version 4.30.00000000

Description: The issue is related to a lack of protection against SQL structure manipulation in the fw.login.php component. This can be exploited by a remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter. The exploitation may allow an attacker to execute arbitrary code with root privileges.

Recommendations: For Artica Web Proxy version 4.30.00000000, consider disabling the fw.login.php component or restricting access to it until a patch is available. Avoid using the apikey parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2021-01786

CVE-2020-17506

Affected Products

Artica Web Proxy

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/artica_proxy_auth_bypass_service_cmds_peform_command_injection.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/158868/Artica-Proxy-4.3.0-Authentication-Bypass.html · Exploit
• 🔥 https://exploit-db.com/exploits/48744 · Exploit
• 🔥 http://packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html · Exploit
• 🔥 https://blog.max0x4141.com/post/artica_proxy · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-17506 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17506 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01786 · Security Note