Lucene search

K
vulnrichmentProgressSoftwareVULNRICHMENT:CVE-2024-7591
HistorySep 05, 2024 - 5:16 p.m.

CVE-2024-7591 Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

2024-09-0517:16:30
CWE-20
ProgressSoftware
github.com
32
cve-2024-7591
progress loadmaster
input validation
os command injection
loadmaster
ecs
multi-tenancy
cve

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:

  • LoadMaster: 7.2.40.0 and above

  • ECS: All versions

  • Multi-Tenancy: 7.1.35.4 and above

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:kemptechnologies:loadmaster:*:*:*:*:*:*:*:*"
    ],
    "vendor": "kemptechnologies",
    "product": "loadmaster",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.2.60.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:kemptechnologies:loadmaster_mt:*:*:*:*:*:*:*:*"
    ],
    "vendor": "kemptechnologies",
    "product": "loadmaster_mt",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "7.1.35.11"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-7591