CVE-2024-4358 – Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

https://notcve.org/view.php?id=CVE-2024-4358

29 May 2024 — In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. En Progress Telerik Report Server, versión 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a través de una vulnerabilidad de omisión de autenticación. This vulnerability allows remote attacke... • https://packetstorm.news/files/id/179406 • CWE-290: Authentication Bypass by Spoofing •