Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34884

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34884

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability. The root cause is a use-after-release style flaw where the parser does not validate the existence of an object before performing operations, enabling information disclosure. The ZDI advisory (ZDI-21-1473) confirms this as a ...