CVE-2017-15883

Published: Jan 8, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography.

Affected (20)

Products: Progress: Sitefinity

Progress

1 product

Sitefinity

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Progress Sitefinity	Version 10.0
Progress Sitefinity	Version 10.1
Progress Sitefinity	Version 5.1
Progress Sitefinity	Version 5.2
Progress Sitefinity	Version 5.3
Progress Sitefinity	Version 5.4
Progress Sitefinity	Version 6.0
Progress Sitefinity	Version 6.1
Progress Sitefinity	Version 6.2
Progress Sitefinity	Version 6.3
Progress Sitefinity	Version 7.0
Progress Sitefinity	Version 7.1
Progress Sitefinity	Version 7.2
Progress Sitefinity	Version 7.3
Progress Sitefinity	Version 8.0
Progress Sitefinity	Version 8.1
Progress Sitefinity	Version 8.2
Progress Sitefinity	Version 9.0
Progress Sitefinity	Version 9.1
Progress Sitefinity	Version 9.2