Description
There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated attacker to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Esri | Portal for ArcGIS | All – ≤ 10.8.1 | — |