CVE-2024-4358

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:telerik:report_server_2024:*:*:*:*:*:*:*:*

History

14 Jun 2024, 17:59

Type	Values Removed	Values Added
References	~~() https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358 -~~	() https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358 - Mitigation, Vendor Advisory
CPE		cpe:2.3:a:telerik:report_server_2024::::::::
First Time		Telerik Telerik report Server 2024

14 Jun 2024, 01:00

Type	Values Removed	Values Added
Summary		(es) En Progress Telerik Report Server, versión 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a través de una vulnerabilidad de omisión de autenticación.

29 May 2024, 15:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-29 15:16

Updated : 2024-06-14 17:59

NVD link : CVE-2024-4358

Mitre link : CVE-2024-4358

CVE.ORG link : CVE-2024-4358

JSON object : View

Products Affected

telerik

report_server_2024

CWE

CWE-290

Authentication Bypass by Spoofing

{"id": "CVE-2024-4358", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "security@progress.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-29T15:16:06.477", "references": [{"url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358", "tags": ["Mitigation", "Vendor Advisory"], "source": "security@progress.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-290"}]}, {"type": "Secondary", "source": "security@progress.com", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability."}, {"lang": "es", "value": "En Progress Telerik Report Server, versi\u00f3n 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a trav\u00e9s de una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n."}], "lastModified": "2024-06-14T17:59:33.993", "cisaActionDue": "2024-07-04", "cisaExploitAdd": "2024-06-13", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:telerik:report_server_2024:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DAE2DE9-B18F-40F5-AFFB-2E85D34BAA18", "versionEndIncluding": "10.0.24.305"}], "operator": "OR"}]}], "sourceIdentifier": "security@progress.com", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability"}