Description
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Report Server | 1.0.0 – < 2024 Q3 (10.2.24.806) | 2024 Q3 (10.2.24.806) |
Advisories 1
- WID-SEC-2024-3139 Progress Software Telerik Report Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 9, 2024