Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the tailon service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkovs tailon GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Artica_proxy | Articatech | 4.50.000000 (including) | 4.50.000000 (including) |
Potential Mitigations
Related Attack Patterns
References
- http://seclists.org/fulldisclosure/2024/Mar/14
- https://github.com/gvalkov/tailon#security
- https://korelogic.com/Resources/Advisories/KL-001-2024-004.txt
- http://seclists.org/fulldisclosure/2024/Mar/14
- https://github.com/gvalkov/tailon#security
- https://korelogic.com/Resources/Advisories/KL-001-2024-004.txt