Lucene search
MitreCVELIST:CVE-2017-14705HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-14705
2022-10-0316:23:39
mitre
www.cve.org
2
denyall
waf
rce
tcp
3001
unauthenticated
remote command execution
shell metacharacters
itoken
authentication
cve-2017-14705
exploiting
DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
Related
nvd
nvd
CVE-2017-14705
2017-09-22 18:29:00
CVE-2017-14706
2017-09-22 18:29:00
prion
prion
Design/Logic Flaw
2017-09-22 18:29:00
Authentication flaw
2017-09-22 18:29:00
cve
cve
CVE-2017-14705
2022-10-03 16:23:39
CVE-2017-14706
2022-10-03 16:23:39
checkpoint_advisories
checkpoint_advisories
DenyAll Web Application Firewall Remote Code Execution (CVE-2017-14706)
2017-10-08 00:00:00
cvelist
cvelist
CVE-2017-14706
2022-10-03 16:23:39