Detail
If a proxy allows a connection to the proxy's localhost interface (either via localhost or 127.0.0.1) it may be possible to access restricted content or services. When combined with an ability to access any port (common with a proxy which allows access to *), this can be easily used as a simple port scanner against the proxy as well.
Solution Advice
Disable the proxy or restrict configuration to only allow access to approved hosts/ports.
Get AI-powered remediation steps tailored to your asset.
Try AI Solutions →