Authentication Bypass by Spoofing (CVE-2024-4358) #shorts #breaking

CVE

This CVE relates to an Authentication Bypass by Spoofing vulnerability. It has existed for approximately 2 months and is not considered a zero-day. It can be exploited using a proof-of-concept tool that chains CVE-2024-4358 and CVE-2024-1800. The main target is Telerik Report Server versions earlier than 10.1.24.514, specifically those running on Internet Information Services (IIS). While the extent of attacks is currently unknown, the primary risk is unauthorized access to restricted functionalities within the Telerik Report Server. This means a hacker could potentially manipulate or retrieve sensitive information without proper authorization.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358