CVE-2024-4358

9.8CRITICAL

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication

Опубликовано: 5/29/2024Обновлено: 10/31/2025
Посмотреть на NVDПосмотреть на MITRE

Известная эксплуатируемая уязвимость CISA

Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.

Требуемое действие:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Срок:

2024-07-04

Описание

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

ИИ-АнализНа базе ИИ

Затронутые продукты

telerikreport_server_2024

Доступные эксплойты (1)

Ссылки