CVE-2024-7292 — Account Controller allows high count of login attempts
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.
Published: 2024-10-09 · CVSS: 7.5 · CVSS 3.1
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7