CVE-2024-2449: LoadMaster Cross-Site Request Forgery (CSRF)
A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF payload hosted on the malicious site would execute HTTP transactions on behalf of the LoadMaster administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2449?
CVE-2024-2449 is classified as a cross-site request forgery vulnerability with significant risk if exploited.
How do I fix CVE-2024-2449?
To fix CVE-2024-2449, it is recommended to update your KEMP LoadMaster to the latest version provided by the vendor.
What types of LoadMaster versions are affected by CVE-2024-2449?
CVE-2024-2449 affects various versions of KEMP LoadMaster, specifically those within the ranges of 7.2.49.0 to 7.2.54.9 and 7.2.55.0 to 7.2.59.3.
What are the potential impacts of CVE-2024-2449 if exploited?
If exploited, CVE-2024-2449 can allow a malicious actor to redirect authenticated LoadMaster administrators to third-party malicious sites.
How can I determine if I am vulnerable to CVE-2024-2449?
You can determine vulnerability to CVE-2024-2449 by checking the version of your KEMP LoadMaster against the affected version ranges.