CVE-2017-14706

CRITICAL

DenyAll WAF <6.4.1 - Info Disclosure

Title source: llm

Description

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.

Exploits (1)

metasploit WORKING POC EXCELLENT

by Mehmet Ince <[email protected]> · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/denyall_waf_exec.rb

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory] https://github.com/rapid7/metasploit-framework/pull/8980

[Exploit, Technical Description, Third Party Advisory] https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/

[Vendor Advisory] https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/

Scores

CVSS v3 9.8

EPSS 0.7237

EPSS Percentile 98.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (12)

denyall/i-suite 5.5.0

denyall/i-suite 5.5.9

denyall/i-suite 5.5.10

denyall/i-suite 5.5.11

denyall/i-suite 5.5.12

denyall/i-suite 5.6.0

denyall/web_application_firewall 5.7.0

denyall/web_application_firewall 6.0.0

denyall/web_application_firewall 6.1.0

denyall/web_application_firewall 6.2.0

... and 2 more

Published Sep 22, 2017

Tracked Since Feb 18, 2026