CVE-2024-4358
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
CVSS
—
No CVSS
EPSS
97.5%
p100
KEV
YES
Jun 13, 2024
Exploit Today
80
0-100
Published: — · Last modified: —
Product
Progress / Telerik Report Server
Vulnerability
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
Added to KEV
Jun 13, 2024
Remediate by
Jul 4, 2024
Known ransomware use
No
Summary description
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://nvd.nist.gov/vuln/detail/CVE-2024-4358
No related CVEs by CWE or product.