CVE-2024-5013

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.

Score

CVSS 3.1 7.5 High

Status

Modified - security@progress.com

Published

2024-06-25

Last modified

2024-08-01

Weaknesses

CWE-400

Affected products

• Whatsup Gold (Progress)
• Whatsup Gold (Progress Software Corporation)

References

• https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024
• https://www.progress.com/network-monitoring