Progress Software has announced security updates for an extremely high severity flaw in LoadMaster and Multi-Tenant (MT) Hypervisor, which could allow arbitrary commands to be executed in the operating system.
The vulnerability tracked as CVE-2024-7591 (CVSS score: 10.0) has been described as insufficient input validation, which can lead to operating system command injection.
“Unauthenticated, remote users with access to the LoadMaster management interface are able to issue a carefully crafted HTTP request, which can allow the execution of arbitrary system commands,” the company said in an advisory last week.
See also: Progress Telerik bug allows RCE attacks
This vulnerability has been addressed by sanitizing the user request submission process to limit the execution of arbitrary system commands.
The flaw affects the following versions –
- LoadMaster (7.2.60.0 and all previous versions)
- Multi-Tenant Hypervisor (7.1.35.11 and all previous versions)
Security researcher Florian Grunow appears to have discovered and reported the flaw. Progress said it has found no evidence of exploitation of the vulnerability.
That being said, users are encouraged to apply the latest fixes as soon as possible by downloading an add-on package. You can perform the update by going to System Configuration > System Administration > Update Software.
Read more:
“We encourage all customers to upgrade LoadMaster as soon as possible to enhance the security of their environment,” the company said. “We also strongly recommend that they follow the guidelines for enhancing security.”
Source: thehackernews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
