CVE-2024-56135

Published: Feb 5, 2025Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)   From 7.2.49.0 to 7.2.54.12 (inclusive)   7.2.48.12 and all prior versions ECS All prior versions to 7.2.60.1 (inclusive)

Affected (4)

Products: Progress: Loadmaster, Multi Tenant Loadmaster

Progress

2 products

Loadmaster

Multi Tenant Loadmaster

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Progress Loadmaster	Up to 7.2.48.12
Progress Loadmaster	From 7.2.49.0 to 7.2.54.13
Progress Loadmaster	From 7.2.55.0 to 7.2.61.0
Progress Multi Tenant Loadmaster	Before 7.1.35.13

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://community.progress.com/s/article/LoadMaster-Security-Vulnerability-CVE-2024-56131-CVE-2024-56132-CVE-2024-56133-CVE-2024-56134-CVE-2024-56135

Source: security@progress.com

Vendor Advisory

Timeline

No history available yet.