Lucene search

K

Progress WhatsUp Gold < 24.0.1 Multiple Vulnerabilities (000266151)

Progress WhatsUp Gold 24.0.1 Vulnerabilitie

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
The Hacker News
Progress Software Releases Patches for 6 Flaws in WhatsUp Gold – Patch Now
27 Sep 202415:44
thn
NVD
CVE-2024-46907
2 Dec 202415:15
nvd
NVD
CVE-2024-46905
2 Dec 202415:15
nvd
NVD
CVE-2024-46909
2 Dec 202415:15
nvd
NVD
CVE-2024-46906
2 Dec 202415:15
nvd
NVD
CVE-2024-46908
2 Dec 202415:15
nvd
NVD
CVE-2024-8785
2 Dec 202415:15
nvd
CVE
CVE-2024-46907
2 Dec 202415:15
cve
CVE
CVE-2024-46906
2 Dec 202415:15
cve
CVE
CVE-2024-46909
2 Dec 202415:15
cve
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(208119);
  script_version("1.7");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/01/17");

  script_cve_id(
    "CVE-2024-8785",
    "CVE-2024-46905",
    "CVE-2024-46906",
    "CVE-2024-46907",
    "CVE-2024-46908",
    "CVE-2024-46909"
  );
  script_xref(name:"IAVA", value:"2024-A-0610-S");

  script_name(english:"Progress WhatsUp Gold < 24.0.1 Multiple Vulnerabilities (000266151)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The version of Progress WhatsUp Gold installed on the remote host is prior to 24.0.1. It is, therefore, affected by 
multiple unspecified vulnerabilities as referenced in the 000266151 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?874dc142");
  script_set_attribute(attribute:"solution", value:
"Upgrade Progress Ipswitch WhatsUp Gold based upon the guidance specified in Article 000266151.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-46909");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/09/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/09/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/10/04");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:ipswitch:whatsup_gold");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:progress:whatsup_gold");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2024-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ipswitch_whatsup_gold_installed.nasl", "ipswitch_whatsup_gold_detect.nbin");
  script_require_keys("installed_sw/Ipswitch WhatsUp Gold");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::combined_get_app_info(app:'Ipswitch WhatsUp Gold');

var constraints = [
  { 'fixed_version' : '24.0.1' }
];

vcf::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE
);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
04 Oct 2024 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS39.8
EPSS0.001
SSVC
16
.json
Report