CVE-2023-30803 | BDVDB-2026-213608 Detail
SangforNet-Gen Application Firewall
Description#
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.
Impact#
CAPEC-21: Exploitation of Trusted Identifiers
Weaknesses#
- CWE-290 Authentication Bypass by Spoofing
References#
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.