CVE-2024-7345 — Direct local client connections to MS Agents can bypass authentication

CVE-2024-7345

Direct local client connections to MS Agents can bypass authentication PUBLISHED

Description (CNA)

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms

Affected (CNA)

Vendor / product	Versions
Progress / OpenEdge	affected 11.7.0 through 11.7.19; affected 12.2.0 through 12.2.14; unaffected 12.8.0

CWE

CWE-94

References

https://community.progress.com/s/article/Direct-local-client-connections-to-MS-Agents-can-bypass-authentication

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.