Skip to content

Commit d3f0d70

Browse files
committed
update link and wording
1 parent ec922e9 commit d3f0d70

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

CVE-2024-1212/CVE-2024-1212.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Exploit for CVE-2024-1212: Unauthenticated RCE in Progress Kemp LoadMaster
1+
# Exploit for CVE-2024-1212: Unauthenticated command injection in Progress Kemp LoadMaster
22
# Tested on: LoadMaster 7.2.59.0.22007
33
# Author: Dave Yesland @daveysec with Rhino Security Labs
44

CVE-2024-1212/README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
# CVE-2024-1212: Unauthenticated RCE in Progress Kemp LoadMaster
1+
# CVE-2024-1212: Unauthenticated Command Injection in Progress Kemp LoadMaster
22

33
## Information
4-
**Description:** This allows remote code execution in the Progress Kemp LoadMaster via the admin web service.
4+
**Description:** This allows unauthenticated command injection in the Progress Kemp LoadMaster via the admin web service.
55
**Versions Affected:** All LoadMaster releases after 7.2.48.1
66
**Version Fixed:** 7.2.59.2 (GA), 7.2.54.8 (LTSF), 7.2.48.10 (LTS)
77
**Researcher:** Dave Yesland
8-
**Disclosure Link:** PLACEHOLDER
8+
**Disclosure Link:** git@github.com:RhinoSecurityLabs/CVEs.git
99
**NIST CVE Link:** https://nvd.nist.gov/vuln/detail/CVE-2024-1212
1010
**Vendor Advisory:** https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
1111

CVE-2024-1212/metasploit/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ def initialize(info = {})
2525
'References' => [
2626
['CVE', '2024-1212'],
2727
['URL', 'https://kemptechnologies.com/kemp-load-balancers'],
28-
['URL', 'https://www.rhinosecuritylabs.com/']
28+
['URL', 'https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/']
2929
],
3030
'DisclosureDate' => '2024',
3131
'Notes' => {

0 commit comments

Comments
 (0)