Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:39 a.m.4 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

9.1CVSS6.8AI score0.00187EPSS
Exploits0References1
NVD
NVD
added 2024/02/26 4:28 p.m.9 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

9.1CVSS6.4AI score0.00187EPSS
Exploits0References1
Prion
Prion
added 2024/02/26 4:28 p.m.15 views

Code injection

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.02.03 and Assetwise Information Integrity Server 23.00.04.04...

7AI score0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/26 12:0 a.m.13 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

6.7AI score0.00187EPSS
Exploits0References1
CVE
CVE
added 2024/02/26 12:0 a.m.3840 views

CVE-2024-27455

The CVE-2024-27455 issue affects Bentley Assetwise ALIM Web and Assetwise Information Integrity Server. A configuration-related flaw can cause exposure of a user’s ALIM session token when downloading files. Affected versions are Assetwise ALIM Web prior to 23.00.04.04 and Assetwise Information In...

9.1CVSS6.6AI score0.00187EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.3 views

Bentley Assetwise ALIM Web Security Vulnerability

Bentley AssetWise ALIM Web is a Bentley web-based application for managing asset and infrastructure lifecycles. A security vulnerability exists in Bentley Assetwise ALIM Web versions prior to 23.00.02.03 and Assetwise Information Integrity Server versions prior to 23.00.04.04, which stems from th...

9.1CVSS6.7AI score0.00187EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/26 12:0 a.m.7 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

6.8AI score0.00187EPSS
Exploits0References1
Rows per page
Query Builder