Researchers have released an exploit chain to achieve remote code execution on unpatched instances of Progress Telerik Report Server. Immediate patching is recommended.

CVE-2024-4358, CVE-2024-1800: Exploit Code Available for Critical Exploit Chain in Progress Telerik Report Server

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Proof of concept for exploit chain in Progress Telerik Report Server could lead to remote code execution. Patching strongly advised.

Progress Telerik Report Server version prior to 2024 Q1 (10.0.24.305) is vulnerable to authentication bypass and an insecure deserialization, allowing an unauthenticated attacker to execute code remotely via a specially forged request.

The version of Progress Telerik Report Server installed on the remote host is affected by an authentication bypass vulnerability, as follows:

  - In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker     can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
200109	Progress Telerik Report Server Authentication Bypass (CVE-2024-4358) (Direct Check)	Nessus	CGI abuses	Remote	critical
114294	Progress Telerik Report Server Authentication Bypass	Web App Scanning	Component Vulnerability	Check Based	critical
200081	Progress Telerik Report Server Authentication Bypass (CVE-2024-4358)	Nessus	CGI abuses	Combined	critical

Detections

Analytics

CVE-2024-4358

critical

Tenable Plugins

critical

critical

critical