CVE-2024-7293

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.
Configurations

Configuration 1 (hide)

cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*

History

15 Oct 2024, 14:51

Type Values Removed Values Added
First Time Progress telerik Reporting
Progress
References () https://docs.telerik.com/report-server/knowledge-base/weak-password-requirement-cve-2024-7293 - () https://docs.telerik.com/report-server/knowledge-base/weak-password-requirement-cve-2024-7293 - Vendor Advisory
CPE cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : 8.8

10 Oct 2024, 12:51

Type Values Removed Values Added
Summary
  • (es) En las versiones de Progress® Telerik® Report Server anteriores al tercer trimestre de 2024 (10.2.24.806), es posible un ataque de fuerza bruta de contraseñas a través de requisitos de contraseñas débiles.

09 Oct 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-09 15:15

Updated : 2024-10-15 14:51


NVD link : CVE-2024-7293

Mitre link : CVE-2024-7293

CVE.ORG link : CVE-2024-7293


JSON object : View

Products Affected

progress

  • telerik_reporting
CWE
CWE-521

Weak Password Requirements