CVE-2024-0833

Description

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

PUBLISHED Reserved 2024-01-23 | Published 2024-01-31 | Updated 2024-10-17 | Assigner ProgressSoftware

Problem types

CWE-269 Improper Privilege Management

Product status

Credits

Lockheed Martin Red Team finder

References

www.telerik.com/teststudio product

docs.telerik.com/...otices-kb/legacy-installer-vulnerability vendor-advisory

www.telerik.com/teststudio product

docs.telerik.com/...otices-kb/legacy-installer-vulnerability vendor-advisory

cve.org (CVE-2024-0833)

nvd.nist.gov (CVE-2024-0833)

Download JSON