Описание
An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker could potentially bypass intended whitelisting when X-Forwarded-For header is enabled.
Ссылки
- Product
- Vendor Advisory
- Product
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2024.03 (исключая)
cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.002
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 5.3
github
почти 2 года назад
An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker could potentially bypass intended whitelisting when X-Forwarded-For header is enabled.
EPSS
Процентиль: 42%
0.002
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-287