Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-11627 EUVD-2024-34192GHSA-prq9-w4j8-gg56

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 th…

Published Jan 7, 2025 · Updated Jan 7, 2025 · Assigned by ProgressSoftware

Description

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

Affected products

VendorProductAffectedFixed
Progress Sitefinity 4.0 – ≤ 14.4.8142, 15.0.8200 – ≤ 15.0.8229, 15.1.8300 – ≤ 15.1.8327, 15.2.8400 – ≤ 15.2.8421 —

References