Description (CNA)
There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Esri / Portal for ArcGIS | affected 11.1 through 12.0 |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No references supplied.