Lucene search
+L

5 matches found

Check Point Advisories
Check Point Advisories
•added 2019/03/14 12:00 a.m.•45 views

Telerik Web UI Information Disclosure (CVE-2017-9248)

A security bypass vulnerability exists in Telerik Web UI. Successful exploitation of this vulnerability can lead to cross-site scripting, arbitrary file uploads and downloads, leak of MachineKey and compromise of the ASP.NET ViewState on the affected system...

7.5CVSS2AI score0.75098EPSS
SaveExploits5
NVD
NVD
•added 2017/07/03 7:29 p.m.•36 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS9.4AI score0.75098EPSS
SaveExploits5References5
Vulnrichment
Vulnrichment
•added 2017/07/03 7:00 p.m.•19 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

6.9AI score0.75098EPSS
SaveExploits5References4
attackerkb
attackerkb
•added 2017/07/03 12:00 a.m.•124 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS8.9AI score0.75098EPSS
SaveIn wildExploits5References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/03 12:00 a.m.•6 views

CVE-2017-9248: Insufficiently Protected Credentials

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

9.8CVSS8.4AI score0.75098EPSS
SaveExploits5References2
Rows per page
Query Builder