CVE-2024-7293

Summary

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.

Affected Software

VendorProductVersion RangeStatus
Progress Software CorporationTelerik Report Server1.0.0 < 10.2.24.806affected

Weaknesses

  • CWE-521: CWE-521 Weak Password Requirements

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References