Description
Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| ECS Connections Manager | Progress Software / ECS Connections Manager | >= V7.2.60.0, < V7.2.63.2 | affected |
| LoadMaster | Progress Software / LoadMaster | >= V7.2.54.12, < V7.2.54.18 | affected |
| LoadMaster | Progress Software / LoadMaster | >= V7.2.60.0, < V7.2.63.2 | affected |
| MOVEit WAF | Progress Software / MOVEit WAF | >= V7.2.60.0, < V7.2.63.2 | affected |
| Object Scale Connection Manager | Progress Software / Object Scale Connection Manager | >= V7.2.60.0, < V7.2.63.2 | affected |