CVE-2024-2448

Published Mar 22, 2024

Last updated 12 days ago

Overview

Description
An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
Source
security@progress.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

security@progress.com
CWE-78
nvd@nist.gov
CWE-78

Social media

Hype score
Not currently trending

Configurations