Lucene search
HistoryJun 25, 2024 - 8:15 p.m.
CVE-2024-5009
whatsup gold
improper access control
local attackers
admin password
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
25.7%
In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin’s password.
Affected configurations
Node
progresswhatsup_goldRange<23.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| progress | whatsup_gold | * | cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
cvelist
cvelist
githubexploit
githubexploit
Exploit for Improper Privilege Management in Progress Whatsup Gold
2024-07-08 12:15:29
Exploit for Improper Privilege Management in Progress Whatsup Gold
2024-07-09 16:56:49
cve
cve
CVE-2024-5009
2024-06-25 20:15:13
thn
thn
Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now
2024-08-08 05:13:00
nessus
nessus
Progress WhatsUp Gold < 23.1.3 Multiple Vulnerabilities (000258130)
2024-08-07 00:00:00
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
25.7%
Related for NVD:CVE-2024-5009