Description
A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF payload hosted on the malicious site would execute HTTP transactions on behalf of the LoadMaster administrator.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Progress Software LoadMaster
Default version status: affected
7.2.55.0 to < 7.2.59.3 ( LoadMaster GA)affected7.2.49.0 to < 7.2.54.9 ( LoadMaster LTSF)affected7.2.48.10 to < 7.2.48.11 (LoadMaster LTS)affected7.1.35.10 to < 7.1.35.11 (LoadMaster MT)affected