CVE-2024-2448
LoadMaster Command Injection Vulnerability
En bref Sévérité HIGH 8.4 EPSS EPSS 55.42 % · centile 99 (2026-10-27) État PUBLISHED Publiée 2024-03-22 Mise à jour 2024-11-15 Attribuée par ProgressSoftware Statut NVD Analyzed Description An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H ProgressSoftware CVSS 3.1 HIGH 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H NVD · security@progress.com (Secondary) CVSS 3.1 HIGH 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:progress:loadmaster:*:*:*:*:ltsf:*:*:* ≥ 7.2.49.0 < 7.2.54.9cpe:2.3:a:progress:loadmaster:*:*:*:*:ga:*:*:* ≥ 7.2.55.0 < 7.2.59.3cpe:2.3:a:progress:loadmaster:7.1.35.10:*:*:*:mt:*:*:*cpe:2.3:a:progress:loadmaster:7.2.48.10:*:*:*:lts:*:*:*Produits affectés Produit Versions Progress Software · LoadMaster affected 7.2.55.0 < 7.2.59.3 ( LoadMaster GA) ; affected 7.2.49.0 < 7.2.54.9 ( LoadMaster LTSF) ; affected 7.2.48.10 < 7.2.48.11 (LoadMaster LTS) ; affected 7.1.35.10 < 7.1.35.11 (LoadMaster MT)
Références
Sources
