This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-30803 | BDVDB-2026-213608 Detail

SangforNet-Gen Application Firewall

Description#

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.

Impact#

CAPEC-21: Exploitation of Trusted Identifiers

Weaknesses#

  • CWE-290 Authentication Bypass by Spoofing

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.