CVE-2020-17506: SQL Injection
Published Aug 12, 2020
·Updated
Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.
Affected Software
1 affected component
Articatech Web Proxy=4.30.000000
Event History
Aug 12, 2020
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-17506?
CVE-2020-17506 is considered critical due to the potential for remote attackers to gain administrative access.
2
How do I fix CVE-2020-17506?
To fix CVE-2020-17506, upgrade Artica Web Proxy to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2020-17506?
CVE-2020-17506 is an SQL injection vulnerability that allows privilege escalation through the apikey parameter.
4
Which versions of Artica Web Proxy are affected by CVE-2020-17506?
Artica Web Proxy version 4.30.000000 is specifically affected by CVE-2020-17506.
5
Can CVE-2020-17506 be exploited remotely?
Yes, CVE-2020-17506 can be exploited by remote attackers without needing physical access to the system.