Artica Tech vulnerabilities
We track 4 vulnerabilities in Artica Tech products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2024.
Latest Artica Tech vulnerabilities
- 9.8 Critical severity
Artica Proxy: Deserialization of Untrusted Data
The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
- 7.5 High severity
Artica Proxy: Relative Path Traversal
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administ
- 9.8 Critical severity
Artica Proxy: Authentication Bypass Using an Alternate Path or Channel
Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP po
- 9.8 Critical severity
Artica Proxy: Authentication Bypass Using an Alternate Path or Channel
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.