Skip to content
OpenAdvisories
High · 7.5 CVE-2024-7293 EUVD-2024-48237GHSA-gc35-q76c-xj63

Password policy for new users is not strong enough

Published Oct 9, 2024 · Updated Oct 9, 2024 · Assigned by ProgressSoftware

Description

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.

Affected products

VendorProductAffectedFixed
Progress Software Telerik Report Server 1.0.0 – < 10.2.24.806 10.2.24.806

Advisories 1

References