Lucene search

K
nvd[email protected]NVD:CVE-2024-7591
HistorySep 05, 2024 - 6:15 p.m.

CVE-2024-7591

2024-09-0518:15:06
CWE-20
web.nvd.nist.gov
10
progress loadmaster
os command injection
input validation
vulnerability
ecs
multi-tenancy

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:

  • LoadMaster: 7.2.40.0 and above

  • ECS: All versions

  • Multi-Tenancy: 7.1.35.4 and above

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.6%

Related for NVD:CVE-2024-7591