Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-2056

Artica Proxy Loopback Services Remotely Accessible Unauthenticated

Description

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Artica Tech Artica Proxy

Default version status: unaffected

  • 4.50affected

References