Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited by a remote attacker to bypass authentication and create rogue administrator users.
The issue, tracked as CVE-2024-4358, carries a CVSS score of 9.8 out of a maximum of 10.0.
"In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or

accounts address admin administrator attacker attackers authentication bypass critical cve cve-2024 cve-2024-4358 cvss cvss score exploited flaw issue progress progress software report rogue rogue admin score security security flaw server software telerik updates