Intrusion PreventionProgress.Telerik.Report.Server.Register.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Progress Telerik Report Server.
The vulnerability is due to improper validation of crafted HTTP requests. A remote, unauthenticated attacker could exploit this vulnerability by sending maliciously crafted packets to a target system. Successfully exploiting the vulnerability could allow an attacker to create an administrator user and execute code under the security context of the target server.
Affected Products
Progress Telerik Report Server prior to 2024 Q2 (10.1.24.514)
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 56035 |
| Created | Jun 13, 2024 |
| Updated | Jun 19, 2024 |
| CVE ID | |
| Tags | Threat Signal |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 94.34% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Permission/Privilege/Access Control |