Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sangfor Next-Gen Application Firewall Authentication Bypass
Vulnerability Description
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
Sangfor Next-Gen Application Firewall 安全漏洞
Vulnerability Description
Sangfor Next-Gen Application Firewall（Sangfor NGAF）是中国深信服（Sangfor）公司的一款应用防火墙。 Sangfor Next-Gen Application Firewall NGAF8.0.17版本存在安全漏洞，该漏洞源于允许未经身份验证的攻击者使用特制的Y-forwarded-for标头发送HTTP请求，从而绕过身份验证并访问管理功能。
CVSS Information
N/A
Vulnerability Type
N/A