CVE-2022-31125: Authentication Bypass in Roxy-wi
Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31125?
CVE-2022-31125 has been classified as a critical vulnerability due to its ability to allow unauthenticated remote access to administrative features.
How do I fix CVE-2022-31125?
To fix CVE-2022-31125, update Roxy-wi to version 6.1.1.0 or later, which addresses the authentication bypass issue.
Who is affected by CVE-2022-31125?
Any installation of Roxy-wi versions prior to 6.1.1.0 is susceptible to CVE-2022-31125.
What type of attacks are possible with CVE-2022-31125?
CVE-2022-31125 allows an attacker to send specially crafted HTTP requests that bypass authentication and gain unauthorized access to Roxy-wi admin functions.
Is authentication required for exploiting CVE-2022-31125?
No, CVE-2022-31125 can be exploited by remote attackers without any authentication.