CVE-2024-0219

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Improper Privilege Management pada progress telerik justdecompile. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Rincian

Terbit di NVD

31 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.telerik.com/devtools/justdecompile/knowledge-base/legacy-installer-vulnerability advisory vendor
• https://www.telerik.com/products/decompiler.aspx product