CVE-2024-1632

CVSS V2 None CVSS V3 None
Description
Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.
Overview
  • CVE ID
  • CVE-2024-1632
  • Assigner
  • ProgressSoftware
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-02-28T12:04:45.869Z
  • Last Modified Date
  • 2024-02-28T12:04:45.869Z
Weakness Enumerations
CWE URL
CWE-284 http://cwe.mitre.org/data/definitions/284.html
References
Reference URL Reference Tags
https://www.progress.com/sitefinity-cms product
https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024 vendor-advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-1632
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1632
History
Created Old Value New Value Data Type Notes
2024-06-26 06:23:40 Added to TrackCVE