CVE-2024-4358

Progress Telerik Report Server allows attackers to bypass authentication via spoofing, enabling unauthorized access to report generation features.

This vulnerability permits attackers to spoof authentication tokens to access unauthorized reports, creating a significant risk for DIB organizations relying on Progress Telerik Report Server for secure data handling. The exploitability of this bypass means it could lead to data exfiltration or ransomware entry if combined with other vulnerabilities, necessitating immediate vendor patching and internal access control reviews.

Shame score — The vulnerability allows authentication bypass but lacks evidence of remote code execution or zero-day exploitation, resulting in moderate embarrassment.