Vulnerability · Published Sep 12, 2024 · Assigned by ProgressSoftware
CVE-2024-6658Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.
High 8.4
In plain English
A high-severity improper input validation in LoadMaster from Progress. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Official description
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.0 (inclusive) From 7.2.49.0 to 7.2.54.11 (inclusive) 7.2.48.12 and all prior versions Multi-Tenant Hypervisor 7.1.35.11 and all prior versions ECS All prior versions to 7.2.60.0 (inclusive)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Progress | LoadMaster | All Previous Versions – before 7.2.60.1 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H