We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-0833

Privilege Elevation via Telerik Test Studio



AssignerProgressSoftware
Reserved2024-01-23
Published2024-01-31
Updated2024-10-17

Description

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.



HIGH: 7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Product status

Default status
affected

2011.0 before v2023.3.1330
affected

Credits

Lockheed Martin Red Team finder

References

https://www.telerik.com/teststudio product

https://docs.telerik.com/teststudio/knowledge-base/product-notices-kb/legacy-installer-vulnerability vendor-advisory

cve.org CVE-2024-0833

nvd.nist.gov CVE-2024-0833

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.