Description (CNA)
Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| hap-wi / roxy-wi | affected < 6.1.1.0 |
CWE
CWE-287
References
- https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-hr76-3hxp-5mm3
- http://packetstormsecurity.com/files/171648/Roxy-WI-6.1.0.0-Improper-Authentication-Control.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.