CVE-2024-56133 HIGH

CVE-2024-56133: Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

Vendor Progress
Product LoadMaster
Weakness CWE-20 · Input validation
Published February 5, 2025
Last update February 5, 2025
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.2.48.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive)

Key dates

02Disclosure timeline

February 5, 2025 CVE published
February 5, 2025 Record updated