In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain unauthorized access to Telerik Report Server’s restricted functionality. This could lead to data theft, code execution, or complete system compromise.