Lucene search
K

7 matches found

Prion
Prion
added 2024/02/26 4:28 p.m.17 views

Code injection

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.02.03 and Assetwise Information Integrity Server 23.00.04.04...

7AI score0.00645EPSS
Exploits0References1
NVD
NVD
added 2024/02/26 4:28 p.m.11 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

9.1CVSS6.4AI score0.00645EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/26 12:0 a.m.7 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

6.8AI score0.00645EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/26 12:0 a.m.15 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

6.7AI score0.00645EPSS
Exploits0References1
CVE
CVE
added 2024/02/26 12:0 a.m.3847 views

CVE-2024-27455

The CVE-2024-27455 issue affects Bentley Assetwise ALIM Web and Assetwise Information Integrity Server. A configuration-related flaw can cause exposure of a user’s ALIM session token when downloading files. Affected versions are Assetwise ALIM Web prior to 23.00.04.04 and Assetwise Information In...

9.1CVSS6.6AI score0.00645EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/22 12:0 a.m.4 views

PT-2023-31886 · Unknown · Eb System Management Console +1

Name of the Vulnerable Software and Affected Versions: eB System Management Console versions prior to 23.00.02.03 Assetwise ALIM For Transportation versions prior to 23.00.01.25 Description: The issue allows an unauthenticated user to view configuration options via a crafted request, leading to...

8.6CVSS8.3AI score0.00465EPSS
Exploits0References4
CVE
CVE
added 2023/12/22 12:0 a.m.46 views

CVE-2023-51708

Summary: CVE-2023-51708 affects Bentley eB System Management Console (Assetwise Integrity Information Server). An unauthenticated user can view configuration options via a crafted request, causing information disclosure. Affected versions are eB System Management Console prior to 23.00.02.03 and ...

8.6CVSS8.1AI score0.00465EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder