漏洞
In Portal for ArcGIS 10.8.1, the portaladmin endpoint does not accept the authentication cookies from Portal for ArcGIS, and does not automatically log users in.
| 漏洞 ID 编号 | BUG-000134419 |
|---|---|
| 已提交 | October 7, 2020 |
| 上次修改时间 | June 5, 2024 |
| 适用范围 | Portal for ArcGIS |
| 找到的版本 | 10.8.1 |
| 操作系统 | Windows OS |
| 操作系统版本 | 10.0 64 Bit |
| 状态 | Will Not Be Addressed |
附加信息
The ArcGIS Enterprise website (/home) and ArcGIS Server Administrator Directory (/portaladmin) are separate applications. To enhance security (block Cross site request forgery (CSRF) type attacks), sharing of authentication credentials between these two has been disabled. In 10.9.1, logins to ArcGIS Server Administrator Directory (/portaadmin) using SAML are supported.解决办法
Create a built-in administrator account for Portal for ArcGIS, and log in at the portaladmin endpoint with the built-in account.
重现步骤
漏洞 ID: BUG-000134419
软件:
- Portal for ArcGIS
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序