CVE-2024-2055

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.
References
Link Resource
http://seclists.org/fulldisclosure/2024/Mar/13 Mailing List Third Party Advisory Exploit
https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt Third Party Advisory Exploit
http://seclists.org/fulldisclosure/2024/Mar/13 Mailing List Third Party Advisory Exploit
https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt Third Party Advisory Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:articatech:artica_proxy:4.40.000000:*:*:*:*:*:*:*
cpe:2.3:a:articatech:artica_proxy:4.50.000000:*:*:*:*:*:*:*

History

12 Jan 2026, 15:45

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Mar/13 - () http://seclists.org/fulldisclosure/2024/Mar/13 - Mailing List, Third Party Advisory, Exploit
References () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - Third Party Advisory, Exploit
CPE cpe:2.3:a:articatech:artica_proxy:4.50.000000:*:*:*:*:*:*:*
cpe:2.3:a:articatech:artica_proxy:4.40.000000:*:*:*:*:*:*:*
First Time Articatech
Articatech artica Proxy

21 Nov 2024, 09:08

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Mar/13 - () http://seclists.org/fulldisclosure/2024/Mar/13 -
References () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt - () https://korelogic.com/Resources/Advisories/KL-001-2024-003.txt -

26 Aug 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

05 Mar 2024, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-05 20:16

Updated : 2026-01-12 15:45


NVD link : CVE-2024-2055

Mitre link : CVE-2024-2055

CVE.ORG link : CVE-2024-2055


JSON object : View

Products Affected

articatech

  • artica_proxy
CWE
CWE-288

Authentication Bypass Using an Alternate Path or Channel

CWE-552

Files or Directories Accessible to External Parties