Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款DenyAll产品授权问题漏洞
Vulnerability Description
DenyAll i-Suite LTS等都是法国DenyAll公司的Web防火墙产品。 多款DenyAll产品中存在安全漏洞。远程攻击者可通过向/webservices/download/index.php文件发送typeOf=debug请求，并在回复中读取iToken字段利用该漏洞获取身份验证信息。以下产品和版本受到影响：DenyAll i-Suite LTS 5.5.0版本至5.5.12版本；i-Suite 5.6版本；Web Application Firewall 5.7版本，Web Applic
CVSS Information
N/A
Vulnerability Type
N/A