virus logo FortiClient Vulnerability

Telerik Progress UI for ASP.NET AJAX CVE-2017-9248 Information Disclosure Vulnerability

description-logoDescription

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise.

affected-products-logoAffected Applications

Progress Telerik UI for ASP.NET AJAX

CVE References

CVE-2017-9248

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9248
ID 4127
Created Jan 26, 2022
Description
Updated		 Oct 26, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Telerik
Patch manual
Application Progress Telerik UI for ASP.NET AJAX