EDB-52103
webappsmultiple
Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
CVE-2024-4358
VeryLazyTech3/28/2025
CVE-2024-4358
9.8CRITICALIn Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication
Publicado: 5/29/2024Atualizado: 10/31/2025
Vulnerabilidade Explorada Conhecida (CISA)
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.
Ação Necessária:
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Prazo:
2024-07-04
Descrição
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
Análise IADesenvolvido por IA
Produtos Afetados
telerikreport_server_2024
Exploits Disponíveis (1)
Referências
- https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358MitigationVendor Advisory
- https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358MitigationVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358US Government Resource