Progress LoadMaster OS Command Injection Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Progress LoadMaster API. This issue arises from OS command injection that exploits unsanitized input in the API parameters. The vulnerability affects authenticated users with 'User Administration' permissions, allowing them to execute arbitrary commands on the LoadMaster appliance.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected LoadMaster appliance.

Remediation

A patch for this vulnerability has been released and is available for download. Instructions for updating LoadMaster can be found in the LoadMaster Technical Note on Updating the LoadMaster Software.