7.5
CVE-2024-3544
- EPSS 0.24%
- Veröffentlicht 02.05.2024 15:15:07
- Zuletzt bearbeitet 03.02.2025 21:38:22
- Quelle security@progress.com
- Teams Watchlist Login
- Unerledigt Login
Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret that must be exchanged between the partners before communication can proceed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Progress ≫ Loadmaster SwEditionlts Version < 7.2.48.11
Progress ≫ Loadmaster SwEditionltsf Version >= 7.2.49.0 < 7.2.54.10
Progress ≫ Loadmaster SwEditionga Version >= 7.2.55.0 < 7.2.59.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.475 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| security@progress.com | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.