Artica Web Proxy 4.30 Authentication Bypass

ArticaTech Artica Proxy is an open-source Artica proxy solution of French ArticaTech company. The ‘apikey’ parameter of the fw.login.php file in version 4.30.00000000 of Artica Web Proxy has a SQL injection vulnerability.

Impact

A remote attacker can use this vulnerability to bypass the privilege detection and gain the web back-end administrator privileges.

Mitigation / Precaution

At present, the manufacturer has not released a repair measure to solve this security problem. It is recommended that users who use this software follow the manufacturer’s homepage or refer to the website for solutions: (http://www.articatech.com/index.php).

Written by

Sooraj V Nair

Cyber Security Engineer

Sooraj was probably the kid who opened up a remote control just to see what was inside, then had to figure out how to put it back together before anyone noticed. That curiosity eventually found its way into cybersecurity, where breaking things is actually part of the job description. Today, he explores vulnerabilities, analysis threats, and helps build safer digital spaces. His favourite question remains the same: “What happens if I try this?”