CVE-2024-7295

Summary

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://docs.telerik.com/report-server/knowledge-base/encryption-weakness-cve-2024-7295

• ←Previous
• Next→