CVE-2024-4837: Trust Boundary Violation Vulnerability
Published May 15, 2024
·Updated
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.
Affected Software
1 affected component
Progress Telerik Report Server<10.1.24.514
Event History
May 15, 2024
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-4837?
CVE-2024-4837 is considered a high severity vulnerability due to the possibility of unauthorized access to restricted functionality.
2
How do I fix CVE-2024-4837?
To fix CVE-2024-4837, upgrade Telerik Report Server to version 10.1.24.514 or later.
3
What impact does CVE-2024-4837 have on affected systems?
CVE-2024-4837 allows unauthenticated attackers to exploit trust boundary violations and access restricted features.
4
Which versions of Telerik Report Server are affected by CVE-2024-4837?
Telerik Report Server versions up to and including 10.0.24.305 are affected by CVE-2024-4837.
5
Can CVE-2024-4837 be exploited remotely?
Yes, CVE-2024-4837 can be exploited remotely by an unauthenticated attacker.