{"id":1534061,"date":"2025-02-11T10:33:44","date_gmt":"2025-02-11T12:33:44","guid":{"rendered":"https:\/\/teknomers.com\/fr\/progress-software-patches-flaws-de-chargement-de-chargement-de-haute-severite-affectant-plusieurs-versions\/"},"modified":"2025-02-11T10:33:49","modified_gmt":"2025-02-11T12:33:49","slug":"progress-software-patches-flaws-de-chargement-de-chargement-de-haute-severite-affectant-plusieurs-versions","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/progress-software-patches-flaws-de-chargement-de-chargement-de-haute-severite-affectant-plusieurs-versions\/","title":{"rendered":"Progress Software Patches Flaws de chargement de chargement de haute s\u00e9v\u00e9rit\u00e9 affectant plusieurs versions"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">11 f\u00e9vrier 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">S\u00e9curit\u00e9 \/ vuln\u00e9rabilit\u00e9 du r\u00e9seau<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/02\/Progress-Software-Patches-Flaws-de-chargement-de-chargement-de-haute.png\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>Le logiciel de progr\u00e8s a <a rel=\"noopener nofollow\" href=\"https:\/\/community.progress.com\/s\/article\/LoadMaster-Security-Vulnerability-CVE-2024-56131-CVE-2024-56132-CVE-2024-56133-CVE-2024-56134-CVE-2024-56135\" target=\"_blank\">abord\u00e9<\/a> Plusieurs d\u00e9fauts de s\u00e9curit\u00e9 \u00e0 haute s\u00e9v\u00e9rit\u00e9 dans son logiciel LoadMaster qui pourraient \u00eatre exploit\u00e9s par des acteurs malveillants pour ex\u00e9cuter des commandes syst\u00e8me arbitraires ou t\u00e9l\u00e9charger n&#8217;importe quel fichier \u00e0 partir du syst\u00e8me.<\/p>\n<p>Kemp Loadmaster est un contr\u00f4leur de livraison d&#8217;applications haute performance (ADC) et un \u00e9quilibreur de charge qui offre une disponibilit\u00e9, une \u00e9volutivit\u00e9, des performances et une s\u00e9curit\u00e9 pour les applications et les sites Web critiques.<\/p>\n<p>Les vuln\u00e9rabilit\u00e9s identifi\u00e9es sont \u00e9num\u00e9r\u00e9es ci-dessous &#8211;<\/p>\n<ul>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56131\" target=\"_blank\">CVE-2024-56131<\/a>, <a rel=\"noopener nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56132\" target=\"_blank\">CVE-2024-56132<\/a>, <a rel=\"noopener nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56133\" target=\"_blank\">CVE-2024-56133<\/a>et <a rel=\"noopener nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56135\" target=\"_blank\">CVE-2024-56135<\/a><\/strong>  (CVSS Scores: 8.4) &#8211; Un ensemble de vuln\u00e9rabilit\u00e9s de validation d&#8217;entr\u00e9e incorrectes qui permet aux acteurs malveillants distants qui ont acc\u00e8s \u00e0 l&#8217;interface de gestion de LoadMaster et s&#8217;authentifient avec succ\u00e8s pour ex\u00e9cuter des commandes syst\u00e8me arbitraires via une demande HTTP soigneusement con\u00e7ue<\/li>\n<li><strong><a rel=\"noopener nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56134\" target=\"_blank\">CVE-2024-56134<\/a><\/strong>  (Score CVSS: 8.4) &#8211; Une vuln\u00e9rabilit\u00e9 de validation des entr\u00e9es incorrecte qui permet aux acteurs malveillants distants qui ont acc\u00e8s \u00e0 l&#8217;interface de gestion de LoadMaster et \u00e0 s&#8217;authentifier avec succ\u00e8s pour t\u00e9l\u00e9charger le contenu de tout fichier sur le syst\u00e8me via une demande HTTP soigneusement con\u00e7ue<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener sponsored\" href=\"https:\/\/thehackernews.uk\/encrypted-attacks-report-d\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/02\/Meta-confirme-lattaque-de-logiciels-spyware-zero-clique.jpg\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>Les versions suivantes du logiciel sont affect\u00e9es par les d\u00e9fauts &#8211;<\/p>\n<ul>\n<li>Versions LoadMaster de 7.2.55.0 \u00e0 7.2.60.1 (inclusives) &#8211; Fix\u00e9 en 7.2.61.0 (GA)<\/li>\n<li>Versions LoadMaster de 7.2.49.0 \u00e0 7.2.54.12 (inclusives) &#8211; Fix\u00e9 en 7.2.54.13 (LTSF)<\/li>\n<li>Version Loadmaster 7.2.48.12 et Prior &#8211; passer \u00e0 LTSF ou GA <\/li>\n<li>Multi-Tenant Loadmaster Version 7.1.35.12 et Prior &#8211; Fix\u00e9 en 7.1.35.13 (GA)<\/li>\n<\/ul>\n<p>Progress Software a not\u00e9 qu&#8217;il n&#8217;avait aucune preuve que l&#8217;une des vuln\u00e9rabilit\u00e9s susmentionn\u00e9es ait \u00e9t\u00e9 exploit\u00e9e dans la nature. Cela dit, avec des d\u00e9fauts r\u00e9v\u00e9l\u00e9s pr\u00e9c\u00e9demment arm\u00e9es par les acteurs de la menace dans le pass\u00e9, il est essentiel que les clients appliquent les derniers correctifs pour une protection optimale.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant? Suivez-nous <a rel=\"noopener nofollow\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Gazouillement <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"noopener nofollow\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">Liendin<\/a> Pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/progress-software-patches-high-severity.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80211 f\u00e9vrier 2025\ue804Ravie LakshmananS\u00e9curit\u00e9 \/ vuln\u00e9rabilit\u00e9 du r\u00e9seau Le logiciel de progr\u00e8s a abord\u00e9 Plusieurs d\u00e9fauts de s\u00e9curit\u00e9 \u00e0 haute s\u00e9v\u00e9rit\u00e9 dans son logiciel LoadMaster qui pourraient \u00eatre exploit\u00e9s par des acteurs malveillants pour ex\u00e9cuter des commandes syst\u00e8me arbitraires ou t\u00e9l\u00e9charger n&#8217;importe quel fichier \u00e0 partir du syst\u00e8me. Kemp Loadmaster est un contr\u00f4leur de livraison [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1534062,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274266,274265,34911,30675,4168,79002,274264,4161,274263,6124,184006,11685,274267,4160,49875,701,26380,238617,246491,4172,154994,107758,79016,11408,4166,4164],"class_list":["post-1534061","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-actualites-de-piratage","tag-actualites-des-pirates","tag-affectant","tag-chargement","tag-comment-pirater","tag-cyber-security-news","tag-cyber-security-news-aujourdhui","tag-cyber-mises-a-jour","tag-cyber-nouvelles","tag-cyberattaques","tag-flaws","tag-haute","tag-malware-ransomware","tag-mises-a-jour-de-la-cybersecurite","tag-patches","tag-plusieurs","tag-progress","tag-securite-de-linformation","tag-securite-du-reseau","tag-securite-informatique","tag-severite","tag-software","tag-the-hacker-news","tag-versions","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1534061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1534061"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1534061\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1534062"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1534061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1534061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1534061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}