7.5
CVE-2024-5013
- EPSS 0.85%
- Veröffentlicht 25.06.2024 21:16:00
- Zuletzt bearbeitet 21.11.2024 09:46:46
- Quelle security@progress.com
- CVE-Watchlists
- Unerledigt
LoginWhatsUp Gold InstallController Denial-of-Service Vulnerability
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Progress ≫ Whatsup Gold Version < 23.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.85% | 0.532 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| security@progress.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
https://www.progress.com/network-monitoring
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024