CVE-2024-4358 Scanner

Progress Telerik Report Server is a comprehensive report management solution used by businesses and organizations to create, store, and manage reports. It is typically deployed on Internet Information Services (IIS) and integrates seamlessly with various data sources. This software is utilized by IT professionals and business analysts to streamline reporting processes and ensure data-driven decision-making. It offers extensive features such as scheduled reports, user management, and extensive customization options. The software supports secure access control mechanisms to protect sensitive report data.

The vulnerability in Progress Telerik Report Server allows unauthenticated attackers to bypass authentication mechanisms and gain unauthorized access to restricted functionalities. This vulnerability can be exploited remotely without requiring any prior access or authentication. It poses a significant risk as it can lead to unauthorized access to sensitive report data and administrative functions. Immediate action is required to mitigate this critical security flaw.

The vulnerability is located in the authentication process of Progress Telerik Report Server. Specifically, the flaw exists in the endpoint handling user registration and token generation, allowing attackers to create new user accounts with administrative privileges. The vulnerable endpoints are /Startup/Register and /Token, which fail to properly validate input and enforce security measures. By exploiting this vulnerability, an attacker can craft a specially designed request to bypass the authentication checks and obtain an access token for administrative access.

Exploitation of this vulnerability can have severe consequences, including unauthorized access to sensitive data and administrative functionalities. Malicious actors could manipulate or delete critical report data, create or remove user accounts, and compromise the integrity of the reporting system. Furthermore, attackers could leverage the unauthorized access to launch additional attacks against other systems within the organization, leading to a widespread security breach.

By using the S4E platform, you can safeguard your digital assets from a wide range of cyber threats, including critical vulnerabilities like CVE-2024-4358. Our comprehensive scanning capabilities ensure that you are promptly alerted to any security flaws in your systems, enabling you to take swift action to protect your data. Join our platform to benefit from continuous monitoring, detailed reports, and expert recommendations tailored to your unique security needs. Stay ahead of potential threats and maintain the integrity of your digital infrastructure with S4E.

References:

• https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/
• https://github.com/sinsinology/CVE-2024-4358
• https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358