8.4Alta
CVE-2024-56133Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
Descripción
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive) From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.48.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive)
Debilidad (CWE):
CWE-20
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Progress | LoadMaster | 7.1.35.0 – < 7.2.61.0 | |
| progress | multi-tenant loadmaster | < 7.1.35.13 |
Referencias y parches
Coincidencias CPE (NVD) (4)
cpe:2.3:a:progress:multi-tenant_loadmaster:*:*:*:*:*:*:*:*< 7.1.35.13cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≤ 7.2.48.12cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≥ 7.2.49.0 < 7.2.54.13cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≥ 7.2.55.0 < 7.2.61.0