Riskcovery

CVE-2024-0833

Privilege Elevation via Telerik Test Studio

State
Published
Severity
7.8 High
Published
Jan 31, 2024
Updated
Oct 17, 2024
Reserved
Jan 23, 2024

Read the record on cve.org

Description

In Telerik Test Studio versions prior to

v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HProgressSoftware

Weaknesses

  • CWE-269 Improper Privilege Management
  • CWE-276 Incorrect Default Permissions

Affected Products

ProductVersions
Telerik Test StudioProgress Software
  • 2011.0 to before v2023.3.1330Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.