Exploit for Improper Privilege Management in Progress Whatsup_Gold

CVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escala...

CVE-2024-5009

creationtimestamp| type| source ---|---|--- 2024-07-08 12:21:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7913 2024-07-09 10:16:06+00:00| published-proof-of-concept| https://t.me/proxybar/2155 2024-07-09 17:17:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/79...

CVE-2024-5009 WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password...