CVE-2024-7295CWE-798

Hard-coded credentials used for temporary and cache data encryption

High · published November 13, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00106 · 1.1th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-11-13T15:22Z
EPSS history
Timeline
  • 13 NOV 15:22Z
    Hard-coded credentials used for temporary and cache data encryption
    cvelistv5