CVE-2024-2448
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
LoadMaster Command Injection Vulnerability
An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
LoadMaster
- Vendor
- Progress Software
- Product
- LoadMaster
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.2.55.0 | affected | semver | 7.2.59.3 ( LoadMaster GA) | Unavailable | None listed |
| 7.2.49.0 | affected | semver | 7.2.54.9 ( LoadMaster LTSF) | Unavailable | None listed |
| 7.2.48.10 | affected | semver | 7.2.48.11 (LoadMaster LTS) | Unavailable | None listed |
| 7.1.35.10 | affected | semver | 7.1.35.11 (LoadMaster MT) | Unavailable | None listed |