Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-27455 EUVD-2024-24654GHSA-qmvm-mg94-c39p

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempt…

Published Feb 26, 2024 · Updated Aug 14, 2024 · Assigned by mitre

Description

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03.

References