VULNERABILITY INTELLIGENCE

CVE-2024-27455

CVSS score9.1 CRITICAL

EPSS probability0.64%

CISA KEVNot currently listed

Published2024-02-26

Last modified2026-06-17

Description

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03.