漏洞
When accessing a JSON or PJSON formatted map service endpoint on a federated ArcGIS Server configured with Integrated Windows Authentication (IWA), a 499 "Token Required" error is returned and no redirect occurs.
| 漏洞 ID 编号 | BUG-000105600 |
|---|---|
| 已提交 | June 6, 2017 |
| 上次修改时间 | June 5, 2024 |
| 适用范围 | Portal for ArcGIS |
| 找到的版本 | 10.5 |
| 操作系统 | N/A |
| 操作系统版本 | N/A |
| 状态 | Will Not Be Addressed |
附加信息
This is an expected behaviour. When accessing the REST endpoint for a service, the esri_auth cookie is not used for authentication. Upon receiving a 499 response when accessing a service using the JSON format, the web client must generate a token for the user and re-submit the request with the token included in either the header or the query parameter of the request.重现步骤
漏洞 ID: BUG-000105600
软件:
- Portal for ArcGIS
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序