Описание
The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phion:airlock_web_application_firewall:4.1-10.41:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01527
Низкий
10 Critical
CVSS2
Дефекты
CWE-399
Связанные уязвимости
github
почти 4 года назад
The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.
EPSS
Процентиль: 81%
0.01527
Низкий
10 Critical
CVSS2
Дефекты
CWE-399