PT-2024-33092 · Progress · Progress Telerik Report Server

Christian Kuersteiner · Published 2024-05-15 · Updated 2025-01-16 · CVE-2024-4837

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 10.0.24.305 or earlier

Description The issue allows an unauthenticated attacker to gain access to restricted functionality in Progress Telerik Report Server via a trust boundary violation. This can occur when the software is used on IIS.

Recommendations For versions 10.0.24.305 or earlier, update to a version later than 10.0.24.305 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-4837

Affected Products

Progress Telerik Report Server

References · 3

• https://osv.dev/vulnerability/CVE-2024-4837 · Vendor Advisory
• https://docs.telerik.com/report-server/knowledge-base/information-exposure-cve-2024-4837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4837 · Security Note