NVD

Id
88201  
Name
CVE-2017-9248  
Description
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-03  
Modified Date
2017-07-17  
Seq
2017-9248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
423737 88201 CVE-2017-6984 https://support.apple.com/HT207798  View
423738 88201 CVE-2017-6984 https://support.apple.com/HT207801  View
423739 88201 CVE-2017-6984 https://support.apple.com/HT207804  View
423740 88201 CVE-2017-6984 https://support.apple.com/HT207805  View
423741 88201 CVE-2017-6984 https://support.apple.com/HT207798  View
423742 88201 CVE-2017-6984 https://support.apple.com/HT207801  View
423743 88201 CVE-2017-6984 https://support.apple.com/HT207804  View
423744 88201 CVE-2017-6984 https://support.apple.com/HT207805  View
430695 88201 CVE-2017-1000060 https://rioru.github.io/pentest/web/2017/03/28/from-unauthenticated-to-root-supervision.html  View
430696 88201 CVE-2017-1000060 https://rioru.github.io/pentest/web/2017/03/28/from-unauthenticated-to-root-supervision.html  View

Related JVN