CVE-2024-7292: Progress Software Corporation Telerik Report Server

Описание

Оригинално описание

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.

Засегнати продукти

• Progress Software Corporation Telerik Report Server: 1.0.0 преди 2024 Q3 (10.2.24.806)
• progress_software telerik_report_server: 1.0.0.0 преди 2024 Q3\/10.2.24.806\/

Вид слабост

• CWE-307 Неправилно ограничаване на прекомерни опити за автентикация

История

Други уязвимости в Progress Software Corporation Telerik Report Server

• 7.1CVE-2024-7295
• 7.5CVE-2024-7294
• 7.5CVE-2024-7293
• 9.9CVE-2024-6327
• 9.8CVE-2024-4358

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-7292
• https://nvd.nist.gov/vuln/detail/CVE-2024-7292
• https://docs.telerik.com/report-server/knowledge-base/improper-restriction-of-excessive-login-attempts-cve-2024-7292