Skip to content
OpenAdvisories
High · 7.8 CVE-2024-0832 EUVD-2024-16615GHSA-xq4v-69gf-r78f

Privilege Elevation via Telerik Reporting Installer

Published Jan 31, 2024 · Updated Aug 23, 2024 · Assigned by ProgressSoftware

Description

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Affected products

VendorProductAffectedFixed
Progress Software Telerik Reporting 1.0 – < 2024 R1 2024 R1

References