CVE-2024-0833 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Reserved 2024-01-23 | Published 2024-01-31 | Updated 2024-10-17 | Assigner ProgressSoftware

HIGH: 7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-269 Improper Privilege Management

Product status

Default status

affected

2011.0 before v2023.3.1330

affected

Credits

Lockheed Martin Red Team finder

References

www.telerik.com/teststudio product

docs.telerik.com/...otices-kb/legacy-installer-vulnerability vendor-advisory

cve.org (CVE-2024-0833)

nvd.nist.gov (CVE-2024-0833)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-0833

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.