← CVE Radar
CVE-2024-4358Registration Authentication Bypass Vulnerability
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
9.8 CRITICALEPSS 97.48%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1ProgressSoftware (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2024-4358
- Status
- Published
- Assigner (CNA)
- ProgressSoftware
- Published
- May 29, 2024
- Last modified
- 2025-10-21 23:05 UTC
- Weaknesses
- CWE-290 · Authentication Bypass by Spoofing
Affected Products
As published by the CNA in the CVE record.
Progress Software CorporationTelerik Report Server1 version range
- 1.0.0 before 10.1.24.514
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS