Lucene search
MitreCVELIST:CVE-2017-14706HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-14706
2022-10-0316:23:39
mitre
www.cve.org
1
denyall waf
unauthenticated remote attackers
authentication information
cve-2017-14706
aws/azure
cloud deployments
DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
Related
checkpoint_advisories
checkpoint_advisories
DenyAll Web Application Firewall Remote Code Execution (CVE-2017-14706)
2017-10-08 00:00:00
prion
prion
Authentication flaw
2017-09-22 18:29:00
Design/Logic Flaw
2017-09-22 18:29:00
cve
cve
CVE-2017-14706
2022-10-03 16:23:39
CVE-2017-14705
2022-10-03 16:23:39
nvd
nvd
CVE-2017-14706
2017-09-22 18:29:00
CVE-2017-14705
2017-09-22 18:29:00
cvelist
cvelist
CVE-2017-14705
2022-10-03 16:23:39