What is CVE-2019-7215?

CVE-2019-7215 is a medium-severity vulnerability in Progress Sitefinity, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2019-06-06.

How severe is CVE-2019-7215?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Progress Sitefinity

CVE-2019-7215

Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie can be reused to maintain access to the…

EPSS: 0.010 (60.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Progress Sitefinity
N/a — versions n/a

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2019-7215?: CVE-2019-7215 is a medium-severity vulnerability in Progress Sitefinity, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2019-06-06.
How severe is CVE-2019-7215?: Medium severity. CVSS v3 base score is 6.5 out of 10.