Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-7295

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Published

2024-11-13T16:15:20.960

Last Modified

2024-11-18T17:41:49.787

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-798
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application progress telerik_report_server < 10.3.24.1112 Yes
References