vendor:
UI for ASP.NET AJAX
by:
Paul Taylor / Foregenix Ltd
9.8
CVSS
CRITICAL
Cryptographic compromise
310
CWE
Product Name: UI for ASP.NET AJAX
Affected Version From: 2012.3.1308
Affected Version To: 2017.1.118
Patch Exists: YES
Related CWE: CVE-2017-9248
CPE: a:telerik:ui_for_asp.net_ajax
Other Scripts:
N/A
Platforms Tested: Windows, Linux, Mac
2018
Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker
dp_crypto.py is an exploit for Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker vulnerability. It is a cryptographic weakness in Telerik.Web.UI.dll which allows an attacker to decrypt the encrypted data. The exploit works on versions 2012.3.1308 thru 2017.1.118 (.NET 35, 40, 45).
Mitigation:
Telerik has released a patch for this vulnerability. Users should update to the latest version of Telerik UI for ASP.NET AJAX.
