CVE-2024-4358

9.8CRITICAL

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication

公開日: 5/29/2024更新日: 10/31/2025
NVDで表示MITREで表示

CISA既知の悪用された脆弱性

Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.

必要な対応:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

期限:

2024-07-04

説明

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

AI分析AIによる分析

影響を受ける製品

telerikreport_server_2024

利用可能なエクスプロイト (1)

参照