laptop and a wrench

漏洞

No Login will be prompted while using a query URL requesting JSON output format for a secured map service at Rest end point, instead getting error 499, Unauthorized access.

上次发布: August 25, 2014 ArcGIS Server (.NET)
漏洞 ID 编号 NIM082833
已提交July 17, 2012
上次修改时间April 2, 2025
适用范围ArcGIS Server (.NET)
找到的版本10.0
操作系统Windows OS
操作系统版本2008 R2 64 Bit
状态Will Not Be Addressed

附加信息

This is expected behavior. JSON format is intended for programmatic use and hence returns the token required (499) error message in JSON format.

解决办法

Change the Query URL output format to html.Example JSON output get query URL is <a href="http://csslystem-237/ArcGIS/rest/services/sample/MapServer/0/query?text=&geometry=&geometryType=esriGeometryPoint&inSR=&spatialRel=esriSpatialRelIntersects&relationParam=&objectIds=&where=1%3D1&time=&returnCountOnly=false&returnIdsOnly=false&returnGeometry=true&maxAllowableOffset=&outSR=&outFields=&f=pjson" target="_blank">http://csslystem-237/ArcGIS/rest/services/sample/MapServer/0/query?text=&geometry=&geometryType=esriGeometryPoint&inSR=&spatialRel=esriSpatialRelIntersects&relationParam=&objectIds=&where=1%3D1&time=&returnCountOnly=false&returnIdsOnly=false&returnGeometry=true&maxAllowableOffset=&outSR=&outFields=&f=pjson</a>Change the paramater value of 'f' as "html" instead of "pjson" and you will be prompted for user credentials. It will give you output in HTML format. Change the Output format to "JSON" and click Query (Get) Tab.

重现步骤

漏洞 ID: NIM082833

软件:

  • ArcGIS Server (.NET)

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项