Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8rc-g3xr-w3p5

Опубликовано: 12 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

EPSS

Процентиль: 41%
0.00194
Низкий

8.8 High

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 8.8
nvd
12 месяцев назад

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

EPSS

Процентиль: 41%
0.00194
Низкий

8.8 High

CVSS3

Дефекты

CWE-319