CVE-2024-4358criticalunder attackCWE-290

CVE-2024-4358: critical vulnerability in Progress Software Corporation Telerik Report…

Registration Authentication Bypass Vulnerability

Published · Updated

Follow this CVE+ Monitor Telerik Report Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 97%
from disclosure to weapon5 days
Published on NVDMay 29
1st PoC+5d
metasploit+6d
CISA KEV+15d
Action required by CISAfederal deadline: 2024-07-04

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

An unauthenticated attacker can bypass login requirements on Telerik Report Server 2024 Q1 and earlier versions running on IIS, gaining unauthorized access to restricted features without needing valid credentials.

Technical detail

CWE-290 authentication bypass allows unauthenticated remote attackers to access restricted Telerik Report Server functionality on IIS deployments (version 10.0.24.305 and earlier). No authentication credentials are required to trigger the vulnerability, resulting in complete compromise of access controls.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Progress Software Corporation · Telerik Report Server
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Progress Software Corporation Telerik Report…

In the same product, most dangerous first.

CVE-2024-1800CRITICALProgress Telerik Report Server DeserializationEPSS 34.2%CVE-2024-6327CRITICALProgress Telerik Report Server DeserializationEPSS 2.0%CVE-2024-7294HIGHUncontrolled resource consumption of anonymous endpointsEPSS 0.3%CVE-2024-7292HIGHAccount Controller allows high count of login attemptsEPSS 0.3%CVE-2024-7293HIGHPassword policy for new users is not strong enoughEPSS 0.3%CVE-2024-7295HIGHHard-coded credentials used for temporary and cache data encryptionEPSS 0.1%