Vulnerability Description
Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret that must be exchanged between the partners before communication can proceed.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress | Loadmaster | < 7.2.48.11 |
Related Weaknesses (CWE)
References
- https://kemptechnologies.com/Product
- https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-ConnecProduct
- https://kemptechnologies.com/Product
- https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-ConnecProduct
FAQ
What is CVE-2024-3544?
CVE-2024-3544 is a vulnerability with a CVSS score of 7.5 (HIGH). Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerab...
How severe is CVE-2024-3544?
CVE-2024-3544 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-3544?
Check the references section above for vendor advisories and patch information. Affected products include: Progress Loadmaster.