CVE-2024-7295 — Hard-coded credentials used for temporary and cache data encryption

CVE-2024-7295

Hard-coded credentials used for temporary and cache data encryption PUBLISHED

Description (CNA)

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Affected (CNA)

Vendor / product	Versions
Progress Software Corporation / Telerik Report Server	affected 1.0.0 before 10.3.24.1112

CWE

CWE-798

References

https://docs.telerik.com/report-server/knowledge-base/encryption-weakness-cve-2024-7295

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.