CVE-2024-56132: Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
This issue affects:
Product
Affected Versions
LoadMaster
From 7.2.55.0 to 7.2.60.1 (inclusive)
From 7.2.49.0 to 7.2.54.12 (inclusive)
7.2.48.12 and all prior versions
ECS
All prior versions to 7.2.60.1 (inclusive)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56132?
CVE-2024-56132 is classified as a high severity vulnerability due to its potential for OS Command Injection.
How do I fix CVE-2024-56132?
To remediate CVE-2024-56132, users should upgrade to LoadMaster versions later than 7.2.60.1 or ensure they are not using vulnerable versions listed in the advisory.
What products are affected by CVE-2024-56132?
CVE-2024-56132 affects specific versions of the Progress LoadMaster and additional identified versions of Progress ECS.
What types of attacks can CVE-2024-56132 enable?
CVE-2024-56132 can enable attackers to perform OS Command Injection, allowing them to execute arbitrary commands on the underlying operating system.
Who is at risk from CVE-2024-56132?
Authenticated users of Progress LoadMaster running the affected versions are at risk of exploitation from CVE-2024-56132.