CVE-2024-7292 — Account Controller allows high count of login attempts

CVE-2024-7292

Account Controller allows high count of login attempts PUBLISHED

Description (CNA)

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.

Affected (CNA)

Vendor / product	Versions
Progress Software Corporation / Telerik Report Server	affected 1.0.0 before 2024 Q3 (10.2.24.806)

CWE

CWE-307

References

https://docs.telerik.com/report-server/knowledge-base/improper-restriction-of-excessive-login-attempts-cve-2024-7292

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.