CVE-2024-6658

Опубликовано: 12 сент. 2024

Источник: nvd

CVSS3: 8.4

CVSS3: 6.8

EPSS Низкий

Описание

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:

 Product

Affected Versions

LoadMaster

From 7.2.55.0 to 7.2.60.0 (inclusive)

From 7.2.49.0 to 7.2.54.11 (inclusive)

7.2.48.12 and all prior versions

Multi-Tenant Hypervisor

7.1.35.11 and all prior versions

ECS

All prior versions to 7.2.60.0 (inclusive)

Ссылки

https://support.kemptechnologies.com/hc/en-us/articles/28910587250701
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:progress:multi-tenant_loadmaster:*:*:*:*:*:*:*:*

Версия до 7.1.35.12 (исключая)

cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*

Версия до 7.2.48.12 (включая)

cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*

Версия от 7.2.49.0 (включая) до 7.2.54.12 (исключая)

cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*

Версия от 7.2.55.0 (включая) до 7.2.60.1 (исключая)

EPSS

Процентиль: 33%

0.00129

Низкий

8.4 High

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo

Связанные уязвимости

GHSA-6r2v-725q-58ch

CVSS3: 8.4

github

больше 1 года назад

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.0 (inclusive)   From 7.2.49.0 to 7.2.54.11 (inclusive)   7.2.48.12 and all prior versions Multi-Tenant Hypervisor 7.1.35.11 and all prior versions ECS All prior versions to 7.2.60.0 (inclusive)

EPSS

Процентиль: 33%

0.00129

Низкий

8.4 High

CVSS3

6.8 Medium

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo