Description
Progress Software Flowmon 是一款专业的网络流量监控与分析解决方案，结合了性能优化、安全威胁检测及网络故障诊断等功能，广泛应用于企业、云服务提供商及大型组织的网络管理中。在Flowmon 11.1.14和12.3.5之前的版本中，未经身份验证的用户可以通过Flowmon管理界面进入系统，从而执行任意系统命令。
Progress Software Flowmon /service.pdfs/confluence 代码执行漏洞（CVE-2024-2389）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://rhinosecuritylabs.com/research/cve-2024-2389-in-progress-flowmon/
https://community.progress.com/s/article/CVE-2024-2389-Flowmon-critical-security-vulnerability
https://github.com/adhikara13/CVE-2024-2389
https://nvd.nist.gov/vuln/detail/CVE-2024-2389
https://attackerkb.com/topics/oeUTrYkOCs/cve-2024-2389
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-2389-command-injection-vulnerability-affecting-progress-flowmon
https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability