漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phion airlock_web_application_firewall 资源管理界面拒绝服务漏洞
Vulnerability Description
Phion airlock Web Application Firewall (WAF)4.1-10.41版本中的操作界面没能恰当的处理CGI请求,这使得远程攻击者可以借助一个特制的请求执行任意命令或引起拒绝服务攻击。CGI请求为图像指定大的宽度和高度参数。
CVSS Information
N/A
Vulnerability Type
N/A