CVE-2024-7345: Code Injection in OpenEdge

Successful exploitation of CVE-2024-7345 could grant an attacker unauthorized access and control over the affected OpenEdge system. By injecting malicious code into Multi-Session Agents, an attacker could potentially execute arbitrary commands, steal sensitive data, or even gain persistent access to the system. The impact is particularly concerning in environments where Multi-Session Agents are used to manage critical business processes, as a compromised agent could disrupt operations or lead to data breaches. The blast radius extends to any data processed or managed by the compromised agents.

1. Reserved2024-07-31
2. Published2024-09-03
3. EPSS updated2026-04-02

The primary mitigation for CVE-2024-7345 is to upgrade to OpenEdge version 12.8.1 or later, which includes the necessary security fixes. If immediate upgrading is not feasible, consider implementing stricter access controls and monitoring Multi-Session Agent activity for suspicious behavior. Review and restrict permissions granted to ABL clients to minimize the potential impact of a successful injection. While a direct workaround is not available, implementing robust logging and auditing of ABL client interactions can aid in detection and incident response. After upgrading, confirm the fix by attempting to trigger the vulnerability and verifying that the security checks are now enforced.