CVEvulnerability
CVE-2024-11627
8.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-01-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-613
Description
: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.
Affected configurations
• progress sitefinity (>= 4.0 < 14.4.8143)
• progress sitefinity (>= 15.0.8200 < 15.0.8230)
• progress sitefinity (>= 15.1.8300 < 15.1.8328)
• progress sitefinity (>= 15.2.8400 < 15.2.8422)