CVE-2024-27455: Bentley Assetwise Alim Web

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03.

Affected products

• Bentley Assetwise Alim Web: from 23.00.03, before 23.00.04.04 (fixed in 23.00.04.04)
• Bentley Assetwise Information Integrity Server: from 16.9, before 23.00.02.03 (fixed in 23.00.02.03)

Published 2024-02-26. Last modified 2026-06-17.