Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-7345

Direct local client connections to MS Agents can bypass authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress OpenEdge

Default version status: affected

  • 11.7.0 to ≤ 11.7.19affected
  • 12.2.0 to ≤ 12.2.14affected
  • 12.8.0unaffected

References