High WID-SEC-2024-2137 1 CVE

Kemp LoadMaster: Schwachstelle ermöglicht Codeausführung

Published Sep 12, 2024 · Updated Sep 12, 2024 · de-DE

Vendor: Kemp Product: LoadMaster

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Kemp LoadMaster ausnutzen, um beliebigen Programmcode auszuführen.

Product

LoadMaster ist eine Load Balancer Lösung von Progress Software.

Vulnerabilities 1

High 8.4

CVE-2024-6658

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.0 (inclusive)   From 7.2.49.0 to 7.2.54.11 (inclusive)   7.2.4…

Progress Software LoadMaster

Sep 12, 2024

Revision history

2024-09-12 #1
Initiale Fassung

References

LoadMaster Security Vulnerability CVE-2024-6658 vom 2024-09-12
https://support.kemptechnologies.com/hc/en-us/articles/28910587250701-LoadMaster-Security-Vulnerability-CVE-2024-6658
GitHub Advisory Database
https://github.com/advisories/GHSA-6r2v-725q-58ch