CVE-2024-0833: progress software telerik test studio Improper Privilege Management
Vulnerability summary
CVE-2024-0833 is a high (CVSS 7.8) Improper Privilege Management vulnerability in progress software telerik test studio. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.5% of scored vulnerabilities.
Timeline
- 31-01-2024PublishedVulnerability first disclosed.
- 17-10-2024Last modifiedVulnerability information updated.
Description
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
0.00 pp
From 0.16% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
- CWE-276Incorrect Default PermissionsDuring installation, installed file permissions are set to allow anyone to modify those files.
Affected systems
Progress1 product
- telerik_test_studio< 2023.3.1330
Progress software1 product
- telerik test studio≥ 2011.0, < v2023.3.1330
2 vendors · 2 products
References
2 links- www.telerik.com/teststudioProduct