CVE-2024-2056

Artica Proxy Loopback Services Remotely Accessible Unauthenticated

State: Published
Severity: 9.8 Critical
Published: Mar 5, 2024
Updated: Feb 13, 2025
Reserved: Mar 1, 2024

Description

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-288 Authentication Bypass Using an Alternate Path or Channel
CWE-552 Files or Directories Accessible to External Parties

Affected Products

Product	Versions
Artica ProxyArtica Tech	4.50Affected

References

https://korelogic.com/Resources/Advisories/KL-001-2024-004.txtthird-party-advisory
https://github.com/gvalkov/tailon#securityrelated
http://seclists.org/fulldisclosure/2024/Mar/14

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.