CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing
Unauthenticated attackers can bypass authentication to access restricted functionality in Telerik Report Server on IIS.
- Exploited in the wild
- Since 13 Jun 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-4358?
CVE-2024-4358 is a critical authentication bypass vulnerability in Progress Software Corporation Telerik Report Server, published on 29 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
Weakness: CWE-290
Which versions are affected by CVE-2024-4358?
It affects 1 product.
Products include Telerik Report Server 2024.
How do I fix CVE-2024-4358?
No fix has been published for CVE-2024-4358 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 4 Jul 2024.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-4358 being exploited?
Yes. Attackers have exploited CVE-2024-4358 in the wild since at least 13 Jun 2024.
Public exploit code: 2 Metasploit modules, 1 Exploit-DB entry, 1 Nuclei template and 6 proofs of concept on GitHub.