Vulnerability-Lookup

CVE-2024-4358 (GCVE-0-2024-4358)

Vulnerability from cvelistv5 – Published: 2024-05-29 14:51 – Updated: 2025-10-21 23:05

CISA Shadowserver KEVIntel

Title

Registration Authentication Bypass Vulnerability

Summary

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

ProgressSoftware

References

2 references

URL	Tags
https://docs.telerik.com/report-server/knowledge-…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
Progress Software Corporation	Telerik Report Server	Affected: 1.0.0 , < 10.1.24.514 (semver)
progress_software	telerik_report_server	Affected: 1.0.0.0 , < 10.1.24.514 (custom) cpe:2.3:a:progress_software:telerik_report_server:1.0.0.0:::::::*

Date Public

2024-05-29 14:00

Credits

Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) working with Trend Micro Zero Day Initiative

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: a07ece91-4850-4e4c-bdd0-9b7a3516d257

Vulnerability ID: CVE-2024-4358

Status: Confirmed

Status Updated: 2024-06-13 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2024-06-13

Asserted: 2024-06-13

Scope

Notes: KEV entry: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | Affected: Progress / Telerik Report Server | Description: Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. | Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. | Due date: 2024-07-04 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://nvd.nist.gov/vuln/detail/CVE-2024-4358

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-290
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Telerik Report Server
Due Date	2024-07-04
Date Added	2024-06-13
Vendorproject	Progress
Vulnerabilityname	Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2024-4358

Created: 2026-02-02 12:26 UTC | Updated: 2026-02-06 07:17 UTC

Shadowserver

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: d46b2ac5-95c5-42a7-8050-813464983387

Vulnerability ID: CVE-2024-4358

Status: Confirmed

Status Updated: 2026-07-06 00:00 UTC

Exploited: Yes

Characteristics

Severity: 98.0

Timestamps

First Seen: 2024-06-07

Asserted: 2024-06-07

Last Seen: 2026-07-06

Scope

Asset Exposure: ['internet-facing']

Evidence

Type: Honeypot

Signal: In The Wild Attempts

Confidence: 70%

Source: shadowserver

Details

1D	1
Iot	no
Feed	Shadowserver Foundation honeypot/exploited-vulnerabilities
Type	http-scan
Class	other-software
7D Avg	0
Vendor	Progress
30D Avg	5
90D Avg	3
Product	Telerik Report Server
Cisa Kev	yes
Connections	4
Observation Date	2026-07-06
Vulnerability Class	CVSS
Vulnerability Score	9.8
Vulnerability Severity	Critical

References

Created: 2026-06-30 09:23 UTC | Updated: 2026-07-08 01:03 UTC

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 6d3252af-567c-4755-b6ed-c74ab4b503fa

Vulnerability ID: CVE-2024-4358

Status: Confirmed

Status Updated: 2024-06-13 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2024-06-13

Asserted: 2024-06-13

Scope

Notes: KEVIntel entry: Registration Authentication Bypass Vulnerability | Affected: Progress Software Corporation / Telerik Report Server | CVSS: 9.8 (CRITICAL) | Used in malware: unknown | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	Registration Authentication Bypass Vulnerability
Vendor	Progress Software Corporation
Product	Telerik Report Server
Added Date	2024-06-13T00:00:00.000Z
Cvss Score	9.8
Epss Score	None
Cvss Severity	CRITICAL
Epss Percentile	None
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-23 14:05 UTC | Updated: 2026-06-23 14:05 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:progress_software:telerik_report_server:1.0.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "telerik_report_server",
            "vendor": "progress_software",
            "versions": [
              {
                "lessThan": "10.1.24.514",
                "status": "affected",
                "version": "1.0.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-4358",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-14T13:56:10.408308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-06-13",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:17.218Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-06-13T00:00:00.000Z",
            "value": "CVE-2024-4358 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:40:46.999Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Telerik Report Server",
          "vendor": "Progress Software Corporation",
          "versions": [
            {
              "lessThan": "10.1.24.514",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) working with Trend Micro Zero Day Initiative"
        }
      ],
      "datePublic": "2024-05-29T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability."
            }
          ],
          "value": "In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-29T14:51:21.612Z",
        "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
        "shortName": "ProgressSoftware"
      },
      "references": [
        {
          "url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Registration Authentication Bypass Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
    "assignerShortName": "ProgressSoftware",
    "cveId": "CVE-2024-4358",
    "datePublished": "2024-05-29T14:51:21.612Z",
    "dateReserved": "2024-04-30T17:34:38.695Z",
    "dateUpdated": "2025-10-21T23:05:17.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2024-4358",
      "cwes": "[\"CWE-290\"]",
      "dateAdded": "2024-06-13",
      "dueDate": "2024-07-04",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://nvd.nist.gov/vuln/detail/CVE-2024-4358",
      "product": "Telerik Report Server",
      "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.",
      "vendorProject": "Progress",
      "vulnerabilityName": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability"
    },
    "epss": {
      "cve": "CVE-2024-4358",
      "date": "2026-07-07",
      "epss": "0.97482",
      "percentile": "0.99892"
    },
    "fkie_nvd": {
      "cisaActionDue": "2024-07-04",
      "cisaExploitAdd": "2024-06-13",
      "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability",
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:telerik:report_server_2024:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"10.0.24.305\", \"matchCriteriaId\": \"4DAE2DE9-B18F-40F5-AFFB-2E85D34BAA18\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.\"}, {\"lang\": \"es\", \"value\": \"En Progress Telerik Report Server, versi\\u00f3n 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a trav\\u00e9s de una vulnerabilidad de omisi\\u00f3n de autenticaci\\u00f3n.\"}]",
      "id": "CVE-2024-4358",
      "lastModified": "2024-11-21T09:42:41.593",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security@progress.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}]}",
      "published": "2024-05-29T15:16:06.477",
      "references": "[{\"url\": \"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\", \"source\": \"security@progress.com\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "security@progress.com",
      "vulnStatus": "Undergoing Analysis",
      "weaknesses": "[{\"source\": \"security@progress.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-290\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-290\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-4358\",\"sourceIdentifier\":\"security@progress.com\",\"published\":\"2024-05-29T15:16:06.477\",\"lastModified\":\"2026-06-17T08:01:44.540\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.\"},{\"lang\":\"es\",\"value\":\"En Progress Telerik Report Server, versi\u00f3n 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a trav\u00e9s de una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n.\"}],\"affected\":[{\"source\":\"security@progress.com\",\"affectedData\":[{\"vendor\":\"Progress Software Corporation\",\"product\":\"Telerik Report Server\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"1.0.0\",\"lessThan\":\"10.1.24.514\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"progress_software\",\"product\":\"telerik_report_server\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:a:progress_software:telerik_report_server:1.0.0.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"1.0.0.0\",\"lessThan\":\"10.1.24.514\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@progress.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-06-14T13:56:10.408308Z\",\"id\":\"CVE-2024-4358\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2024-06-13\",\"cisaActionDue\":\"2024-07-04\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability\",\"weaknesses\":[{\"source\":\"security@progress.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-290\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-290\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:telerik:report_server_2024:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.0.24.305\",\"matchCriteriaId\":\"4DAE2DE9-B18F-40F5-AFFB-2E85D34BAA18\"}]}]}],\"references\":[{\"url\":\"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\",\"source\":\"security@progress.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"platforms\": [\"Windows\"], \"product\": \"Telerik Report Server\", \"vendor\": \"Progress Software Corporation\", \"versions\": [{\"lessThan\": \"10.1.24.514\", \"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"semver\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) working with Trend Micro Zero Day Initiative\"}], \"datePublic\": \"2024-05-29T14:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.\"}], \"value\": \"In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.\"}], \"impacts\": [{\"capecId\": \"CAPEC-115\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-115 Authentication Bypass\"}]}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-290\", \"description\": \"CWE-290 Authentication Bypass by Spoofing\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"orgId\": \"f9fea0b6-671e-4eea-8fde-31911902ae05\", \"shortName\": \"ProgressSoftware\", \"dateUpdated\": \"2024-05-29T14:51:21.612Z\"}, \"references\": [{\"url\": \"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"title\": \"Registration Authentication Bypass Vulnerability\", \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T20:40:46.999Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358\", \"tags\": [\"x_transferred\"]}]}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-4358\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-14T13:56:10.408308Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2024-06-13\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:progress_software:telerik_report_server:1.0.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"progress_software\", \"product\": \"telerik_report_server\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0.0.0\", \"lessThan\": \"10.1.24.514\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-30T15:45:02.281Z\"}, \"timeline\": [{\"time\": \"2024-06-13T00:00:00+00:00\", \"lang\": \"en\", \"value\": \"CVE-2024-4358 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-4358\", \"assignerOrgId\": \"f9fea0b6-671e-4eea-8fde-31911902ae05\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"ProgressSoftware\", \"dateReserved\": \"2024-04-30T17:34:38.695Z\", \"datePublished\": \"2024-05-29T14:51:21.612Z\", \"dateUpdated\": \"2025-07-28T19:43:14.331Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-4358

Vulnerability from fkie_nvd - Published: 2024-05-29 15:16 - Updated: 2026-06-17 08:01

CISA Shadowserver KEVIntel

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
security@progress.com	https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358	Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358	Mitigation, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358	US Government Resource

Impacted products

	Vendor	Product	Version
	telerik	report_server_2024	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Telerik Report Server",
          "vendor": "Progress Software Corporation",
          "versions": [
            {
              "lessThan": "10.1.24.514",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@progress.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:progress_software:telerik_report_server:1.0.0.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "telerik_report_server",
          "vendor": "progress_software",
          "versions": [
            {
              "lessThan": "10.1.24.514",
              "status": "affected",
              "version": "1.0.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cisaActionDue": "2024-07-04",
  "cisaExploitAdd": "2024-06-13",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:telerik:report_server_2024:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DAE2DE9-B18F-40F5-AFFB-2E85D34BAA18",
              "versionEndIncluding": "10.0.24.305",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability."
    },
    {
      "lang": "es",
      "value": "En Progress Telerik Report Server, versi\u00f3n 2024 Q1 (10.0.24.305) o anterior, en IIS, un atacante no autenticado puede obtener acceso a la funcionalidad restringida de Telerik Report Server a trav\u00e9s de una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n."
    }
  ],
  "id": "CVE-2024-4358",
  "lastModified": "2026-06-17T08:01:44.540",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "security@progress.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-4358",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-06-14T13:56:10.408308Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-05-29T15:16:06.477",
  "references": [
    {
      "source": "security@progress.com",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4358"
    }
  ],
  "sourceIdentifier": "security@progress.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-290"
        }
      ],
      "source": "security@progress.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-290"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

WID-SEC-W-2024-3158

Vulnerability from csaf_certbund - Published: 2024-10-13 22:00 - Updated: 2024-10-13 22:00

Summary

Progress Software Telerik Report Server: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Der Telerik Report Server bietet eine Plattform zur Erstellung, Verwaltung und Verteilung von Berichten in einem Unternehmen.

Angriff: Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software Telerik Report Server ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen oder die Authentifizierung zu umgehen.

Betroffene Betriebssysteme: - Windows

CVE-2024-4357

Es besteht eine Schwachstelle in Progress Software Telerik Report Server. Dieser Fehler existiert im .NET-Framework eines Drittanbieters aufgrund einer vererbten unzulässigen Einschränkung der Referenz auf externe XML-Entitäten. Ein entfernter authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Progress Software Telerik Report Server <10.1.24.514 Progress Software / Telerik Report Server		<10.1.24.514

CVE-2024-4358

Es besteht eine Schwachstelle in Progress Software Telerik Report Server. Dieser Fehler existiert wegen eines Spoofing-Problems. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um die Authentifizierung zu umgehen.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Progress Software Telerik Report Server <10.1.24.514 Progress Software / Telerik Report Server		<10.1.24.514

CVE-2024-8014

Es bestehen mehrere Schwachstellen in Progress Software Telerik Report Server. Diese Fehler existieren wegen mehrerer Unsafe Reflection Probleme. Ein entfernter, authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen.

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Progress Software Telerik Report Server <10.2.24.924 Progress Software / Telerik Report Server		<10.2.24.924
Progress Software Telerik Report Server <10.1.24.514 Progress Software / Telerik Report Server		<10.1.24.514
Progress Software Telerik Report Server <18.2.24.924 Progress Software / Telerik Report Server		<18.2.24.924

CVE-2024-8015

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Progress Software Telerik Report Server <10.2.24.924 Progress Software / Telerik Report Server		<10.2.24.924
Progress Software Telerik Report Server <10.1.24.514 Progress Software / Telerik Report Server		<10.1.24.514
Progress Software Telerik Report Server <18.2.24.924 Progress Software / Telerik Report Server		<18.2.24.924

References

6 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://docs.telerik.com/report-server/knowledge-…	external
https://docs.telerik.com/report-server/knowledge-…	external
https://docs.telerik.com/reporting/knowledge-base…	external
https://docs.telerik.com/report-server/knowledge-…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Telerik Report Server bietet eine Plattform zur Erstellung, Verwaltung und Verteilung von Berichten in einem Unternehmen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software Telerik Report Server ausnutzen, um Informationen offenzulegen, beliebigen Code auszuf\u00fchren oder die Authentifizierung zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3158 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3158.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3158 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3158"
      },
      {
        "category": "external",
        "summary": "Telerik Advisory vom 2024-10-13",
        "url": "https://docs.telerik.com/report-server/knowledge-base/insecure-type-resolution-cve-2024-8015"
      },
      {
        "category": "external",
        "summary": "Telerik Advisory vom 2024-10-13",
        "url": "https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358"
      },
      {
        "category": "external",
        "summary": "Telerik Advisory vom 2024-10-13",
        "url": "https://docs.telerik.com/reporting/knowledge-base/insecure-type-resolution-cve-2024-8014"
      },
      {
        "category": "external",
        "summary": "Telerik Advisory vom 2024-10-13",
        "url": "https://docs.telerik.com/report-server/knowledge-base/xxe-vulnerability-cve-2024-4357"
      }
    ],
    "source_lang": "en-US",
    "title": "Progress Software Telerik Report Server: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-10-13T22:00:00.000+00:00",
      "generator": {
        "date": "2024-10-14T09:39:29.285+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2024-3158",
      "initial_release_date": "2024-10-13T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-10-13T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.2.24.924",
                "product": {
                  "name": "Progress Software Telerik Report Server \u003c18.2.24.924",
                  "product_id": "T038279"
                }
              },
              {
                "category": "product_version",
                "name": "18.2.24.924",
                "product": {
                  "name": "Progress Software Telerik Report Server 18.2.24.924",
                  "product_id": "T038279-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:progress:telerik_report_server:18.2.24.924"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.2.24.924",
                "product": {
                  "name": "Progress Software Telerik Report Server \u003c10.2.24.924",
                  "product_id": "T038280"
                }
              },
              {
                "category": "product_version",
                "name": "10.2.24.924",
                "product": {
                  "name": "Progress Software Telerik Report Server 10.2.24.924",
                  "product_id": "T038280-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:progress:telerik_report_server:10.2.24.924"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.1.24.514",
                "product": {
                  "name": "Progress Software Telerik Report Server \u003c10.1.24.514",
                  "product_id": "T038281"
                }
              },
              {
                "category": "product_version",
                "name": "10.1.24.514",
                "product": {
                  "name": "Progress Software Telerik Report Server 10.1.24.514",
                  "product_id": "T038281-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:progress:telerik_report_server:10.1.24.514"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Telerik Report Server"
          }
        ],
        "category": "vendor",
        "name": "Progress Software"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-4357",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Progress Software Telerik Report Server. Dieser Fehler existiert im .NET-Framework eines Drittanbieters aufgrund einer vererbten unzul\u00e4ssigen Einschr\u00e4nkung der Referenz auf externe XML-Entit\u00e4ten. Ein entfernter authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038281"
        ]
      },
      "release_date": "2024-10-13T22:00:00.000+00:00",
      "title": "CVE-2024-4357"
    },
    {
      "cve": "CVE-2024-4358",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Progress Software Telerik Report Server. Dieser Fehler existiert wegen eines Spoofing-Problems. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um die Authentifizierung zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038281"
        ]
      },
      "release_date": "2024-10-13T22:00:00.000+00:00",
      "title": "CVE-2024-4358"
    },
    {
      "cve": "CVE-2024-8014",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Progress Software Telerik Report Server. Diese Fehler existieren wegen mehrerer Unsafe Reflection Probleme. Ein entfernter, authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038280",
          "T038281",
          "T038279"
        ]
      },
      "release_date": "2024-10-13T22:00:00.000+00:00",
      "title": "CVE-2024-8014"
    },
    {
      "cve": "CVE-2024-8015",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Progress Software Telerik Report Server. Diese Fehler existieren wegen mehrerer Unsafe Reflection Probleme. Ein entfernter, authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T038280",
          "T038281",
          "T038279"
        ]
      },
      "release_date": "2024-10-13T22:00:00.000+00:00",
      "title": "CVE-2024-8015"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-4358 (GCVE-0-2024-4358)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

Shadowserver

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Characteristics

Timestamps

Scope

Evidence

Honeypot In The Wild Attempts Confidence: 70% Source: shadowserver

Details

References

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

FKIE_CVE-2024-4358

WID-SEC-W-2024-3158

Tags

Sightings

Nomenclature