CVE-2024-0833

HIGH
Published Jan 31, 2024 Modified Nov 21, 2024 CWE-269 CWE-276

Description

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Is your site exposed to CVE-2024-0833?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-269 CWE-269
CWE-276 Incorrect Default Permissions

Affected Products

Vendor Product
progress telerik_test_studio

References

Frequently Asked Questions

What is CVE-2024-0833? +
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system. It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2024-0833? +
CVE-2024-0833 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-0833? +
CVE-2024-0833 affects products from progress, specifically: telerik_test_studio. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-0833? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-0833 — free, no signup required.