CVE-2017-15883 Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vec...
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress sitefinity | = 5.1 | No fix listed |
| progress sitefinity | = 5.2 | No fix listed |
| progress sitefinity | = 5.3 | No fix listed |
| progress sitefinity | = 5.4 | No fix listed |
| progress sitefinity | = 6.0 | No fix listed |
| progress sitefinity | = 6.1 | No fix listed |
| progress sitefinity | = 6.2 | No fix listed |
| progress sitefinity | = 6.3 | No fix listed |
| progress sitefinity | = 7.0 | No fix listed |
| progress sitefinity | = 7.1 | No fix listed |
| progress sitefinity | = 7.2 | No fix listed |
| progress sitefinity | = 7.3 | No fix listed |
| progress sitefinity | = 8.0 | No fix listed |
| progress sitefinity | = 8.1 | No fix listed |
| progress sitefinity | = 8.2 | No fix listed |
| progress sitefinity | = 9.0 | No fix listed |
| progress sitefinity | = 9.1 | No fix listed |
| progress sitefinity | = 9.2 | No fix listed |
| progress sitefinity | = 10.0 | No fix listed |
| progress sitefinity | = 10.1 | No fix listed |
References
- knowledgebase.progress.com vendor-advisory
- www.mnemonic.no third-party-advisory