CVE-2024-34093

An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker could potentially bypass intended whitelisting when X-Forwarded-For header is enabled.
Configurations

Configuration 1 (hide)

cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*

History

18 Mar 2025, 15:26

Type Values Removed Values Added
CPE cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*
First Time Archerirm
Archerirm archer
References () https://archerirm.com - () https://archerirm.com - Product
References () https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963 - () https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963 - Vendor Advisory

Information

Published : 2024-05-06 16:15

Updated : 2025-03-18 15:26


NVD link : CVE-2024-34093

Mitre link : CVE-2024-34093

CVE.ORG link : CVE-2024-34093


JSON object : View

Products Affected

archerirm

  • archer
CWE
CWE-287

Improper Authentication