Progress Flowmon OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Progress Flowmon versions prior to 12.5.8. This vulnerability allows an authenticated low-privileged user to manipulate requests during the report generation process, leading to the execution of unintended commands on the server.

Impact

Exploitation of this vulnerability allows for OS command injection, where unintended commands are executed on the server.

Remediation

Users are advised to upgrade to the latest version of Progress Flowmon. Upgrade packages are available through the Progress Community or the Progress Update Catalog. Note that upgrading will cause a system outage.