Unrated severityNVD Advisory· Published Nov 13, 2024· Updated Nov 13, 2024

Hard-coded credentials used for temporary and cache data encryption

CVE-2024-7295

Description

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Affected products

Progress (organisation)/Telerik Report Serverllm-fuzzy
Range: < 10.3.24.1112
Progress Software Corporation/Telerik Report Serverv5
Range: 1.0.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

docs.telerik.com/report-server/knowledge-base/encryption-weakness-cve-2024-7295mitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000