Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kemp LoadMaster ausnutzen, um beliebigen Programmcode auszuführen oder Sicherheitsvorkehrungen zu umgehen.
Product
LoadMaster ist eine Load Balancer Lösung von Progress Software.
Vulnerabilities 2
-
High 8.4CVE-2024-2448 EPSS 55%
LoadMaster Command Injection Vulnerability
An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
-
High 7.5CVE-2024-2449 EPSS 13%
LoadMaster Cross-Site Request Forgery (CSRF)
A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party s…
Revision history
-
#2
Prüfung Produkteintragung
-
#1
Initiale Fassung
References
-
Progress Kemp Knowledge Base vom 2024-03-24
https://support.kemptechnologies.com/hc/en-us/articles/25119767150477-LoadMaster-Security-Vulnerabilities-CVE-2024-2448-and-CVE-2024-2449
-
NIST Vulnerability Database vom 2024-03-24
https://nvd.nist.gov/vuln/detail/CVE-2024-2448
-
NIST Vulnerability Database vom 2024-03-24
https://nvd.nist.gov/vuln/detail/CVE-2024-2449