high7.8
CVE-2024-0219
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.
Impact
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Telerik Justdecompile | through 2019.1.118.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.telerik.com/devtools/justdecompile/knowledge-base/legacy-installer-vulnerability
- https://www.telerik.com/products/decompiler.aspx
- https://docs.telerik.com/devtools/justdecompile/knowledge-base/legacy-installer-vulnerability
- https://www.telerik.com/products/decompiler.aspx