CVE-2024-2055

When the "Rich Filemanager" function is enabled, the web interface for file management is accessible to anyone without authentication (CWE-288 — missing authentication mechanism). Additionally, the process runs in the context of the root account, and system files are accessible through it without any permission restrictions (CWE-552 — unprotected file access). A remote attacker, without any credentials, can read, modify, and delete any files on the server.

An unauthenticated remote attacker gains full access to the file system with root privileges, enabling sensitive data theft, configuration modification, malicious code upload, and complete server compromise.

Disable the "Rich Filemanager" function if not required and apply patches available from the vendor according to the references. It is also recommended to restrict access to the Artica Proxy management interface via firewall to trusted IP addresses only.

Artica Proxy (Articatech) with the "Rich Filemanager" function enabled — specific versions indicated in the vendor's references and in KoreLogic's KL-001-2024-003 advisory