CVE-2024-6658: Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:
Product
Affected Versions
LoadMaster
From 7.2.55.0 to 7.2.60.0 (inclusive)
From 7.2.49.0 to 7.2.54.11 (inclusive)
7.2.48.12 and all prior versions
Multi-Tenant Hypervisor
7.1.35.11 and all prior versions
ECS
All prior versions to 7.2.60.0 (inclusive)
Other sources
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:
?Product
Affected Versions
LoadMaster
From 7.2.55.0 to 7.2.60.0 (inclusive)
?
From 7.2.49.0 to 7.2.54.11 (inclusive)
?
7.2.48.12 and all prior versions
Multi-Tenant Hypervisor
7.1.35.11 and all prior versions
ECS
All prior versions to 7.2.60.0 (inclusive)
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6658?
CVE-2024-6658 is classified as a critical severity vulnerability due to its potential for OS Command Injection.
How do I fix CVE-2024-6658?
To fix CVE-2024-6658, upgrade the affected Progress LoadMaster software to versions above 7.2.60.0 or ensure you are on version 7.2.48.12 or lower.
Which versions of LoadMaster are affected by CVE-2024-6658?
The affected versions of LoadMaster are from 7.2.55.0 to 7.2.60.0 and from 7.2.49.0 to 7.2.54.11.
What products apart from LoadMaster does CVE-2024-6658 affect?
CVE-2024-6658 also affects Progress Multi-Tenant Hypervisor up to version 7.1.35.11 and Progress ECS up to version 7.2.60.0.
What type of vulnerability is CVE-2024-6658?
CVE-2024-6658 is an Improper Input Validation vulnerability that allows for OS Command Injection.