Skip to content
OpenAdvisories
High WID-SEC-2025-0282 5 CVEs

Kemp LoadMaster: Mehrere Schwachstellen

Published Feb 5, 2025 · Updated Feb 5, 2025 · de-DE

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Kemp LoadMaster ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

LoadMaster ist eine Load Balancer Lösung von Progress Software.

Vulnerabilities 5

  • High 8.4

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

  • High 8.4

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

  • High 8.4

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

  • High 8.4

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

  • High 8.4

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

Revision history

  1. #1

    Initiale Fassung

References

  • Progress Community vom 2025-02-05
    https://community.progress.com/s/article/LoadMaster-Security-Vulnerability-CVE-2024-56131-CVE-2024-56132-CVE-2024-56133-CVE-2024-56134-CVE-2024-56135