laptop and a wrench

漏洞

ArcGIS Server will ignore invalid layer IDs in REST URLs even for downloads.

ArcGIS GIS Server
漏洞 ID 编号 BUG-000166464
已提交April 3, 2024
上次修改时间November 5, 2024
适用范围ArcGIS GIS Server
找到的版本11.2
操作系统Windows OS
操作系统版本11.0 64 bit
修正版本11.4
状态Fixed

解决办法

As confirmed with Product Security Incident Response Team (PSIRT) from a security standpoint, there is no impact—this issue is informative. However, this issue generates unnecessary noise and false positives because the expectation is that an invalid path results in an HTTP 404 error.

重现步骤

漏洞 ID: BUG-000166464

软件:

  • ArcGIS GIS Server

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项