Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 11:59 a.m.11 views

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

9.6CVSS7.4AI score0.00057EPSS
Exploits0References1
OSV
OSV
added 2024/09/03 3:15 p.m.1 views

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

9.6CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/09/03 3:15 p.m.14 views

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

9.6CVSS0.00057EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/03 2:50 p.m.14 views

CVE-2024-7345 Direct local client connections to MS Agents can bypass authentication

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

8.3CVSS7.5AI score0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/03 2:50 p.m.16 views

CVE-2024-7345 Direct local client connections to MS Agents can bypass authentication

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

8.3CVSS0.00057EPSS
Exploits0References1
CVE
CVE
added 2024/09/03 2:50 p.m.51 views

CVE-2024-7345

CVE-2024-7345 involves a Local ABL Client bypassing PASOE security checks that can enable unauthorized code injection into OpenEdge Multi-Session Agents. Affected OpenEdge LTS platforms include versions up to 11.7.18 and 12.2.13 on all supported releases. Root cause: bypass of required PASOE secu...

9.6CVSS8.5AI score0.00057EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/06/23 8:15 p.m.12 views

CVE-2023-34203

In Progress OpenEdge OEM OpenEdge Management and OEE OpenEdge Explorer before 12.7, a remote user who has any OEM or OEE role could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and...

8.8CVSS8.9AI score0.01012EPSS
Exploits0References1
Rows per page
Query Builder