Vulnerability · Published Feb 5, 2025 · Assigned by ProgressSoftware
CVE-2024-56131Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
High 8.4
In plain English
A high-severity improper input validation in LoadMaster from Progress. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.1% (higher than 93% of all known vulnerabilities).
Official description
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive) From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.48.12 and all prior versions Multi-Tenant Hypervisor 7.1.35.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Progress | LoadMaster | All Previous Versions – before 7.2.61.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H