CVE-2017-17055: OS Command Injection
Published Dec 6, 2017
·Updated
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
Affected Software
1 affected component
Articatech Artica Proxy<3.06.112911
Event History
Dec 6, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17055?
CVE-2017-17055 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2017-17055?
To fix CVE-2017-17055, update your Artica Web Proxy software to version 3.06.112912 or later.
3
What type of attack does CVE-2017-17055 allow?
CVE-2017-17055 allows remote attackers to execute arbitrary code via a cross-site scripting (XSS) attack.
4
What is affected by CVE-2017-17055?
CVE-2017-17055 affects Artica Web Proxy versions prior to 3.06.112911.
5
What file is related to CVE-2017-17055?
The vulnerability is related to the freeradius.users.php file in the Artica Web Proxy application.