8.4Hoch
CVE-2024-56135Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
Beschreibung
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive) From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.48.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive)
Schwachstellentyp (CWE):
CWE-20
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Progress | LoadMaster | 7.2.37.0 – < 7.2.61.0 | |
| progress | multi-tenant loadmaster | < 7.1.35.13 |
Referenzen und Patches
CPE-Treffer (NVD) (4)
cpe:2.3:a:progress:multi-tenant_loadmaster:*:*:*:*:*:*:*:*< 7.1.35.13cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≤ 7.2.48.12cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≥ 7.2.49.0 < 7.2.54.13cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≥ 7.2.55.0 < 7.2.61.0