CVEvulnerability

CVE-2024-3544

7.5 HIGH Published 2024-05-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-05-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-798

Description

Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret that must be exchanged between the partners before communication can proceed.

Affected configurations

• progress loadmaster (< 7.2.48.11) • progress loadmaster (>= 7.2.49.0 < 7.2.54.10) • progress loadmaster (>= 7.2.55.0 < 7.2.59.4)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References