Lucene search
PRIOn knowledge basePRION:CVE-2017-18179HistoryFeb 12, 2018 - 2:29 p.m.
Authentication flaw
2018-02-1214:29:00
PRIOn knowledge base
www.prio-n.com
2
Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sitefinity | eq | 9.1 |
Related
cvelist
cvelist
CVE-2017-18179
2022-10-03 16:23:14
cve
cve
CVE-2017-18179
2022-10-03 16:23:14
nvd
nvd
CVE-2017-18179
2018-02-12 14:29:00
openvas
openvas
Progress Sitefinity < 10.1 Multiple Vulnerabilities (Feb 2018)
2018-02-13 00:00:00