Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-7295

Hard-coded credentials used for temporary and cache data encryption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation Telerik Report Server

Default version status: unaffected

  • 1.0.0 to < 10.3.24.1112affected

References