Vulnerabilities > CVE-2024-5009 - Unspecified vulnerability in Progress Whatsup Gold

CVSS 8.4 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

progress

NVD

Published: 2024-06-25

Updated: 2024-09-06

Summary

In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Whatsup Gold - Progress Whatsup Gold 7.0 Progress Whatsup Gold 7.03 Progress Whatsup Gold 7.04 Progress Whatsup Gold 8.0 Progress Whatsup Gold 8.01 Progress Whatsup Gold 8.03 Progress Whatsup Gold 11 Progress Whatsup Gold 15.02 Progress Whatsup Gold 16.3 Progress Whatsup Gold 16.4 Progress Whatsup Gold 17.1.1 Progress Whatsup Gold 18.0 Progress Whatsup Gold 21.1.0 Progress Whatsup Gold 21.1.1 Progress Whatsup Gold 21.1.2 Progress Whatsup Gold 22.0.0 Progress Whatsup Gold 22.0.1 Progress Whatsup Gold 22.0.2 Progress Whatsup Gold 22.1.0 Progress Whatsup Gold 23.0.0 Progress Whatsup Gold 23.0.1 Progress Whatsup Gold 23.0.2 Progress Whatsup Gold 23.1.0 Progress Whatsup Gold 23.1.1 Progress Whatsup Gold 23.1.2	27

Summary

Vulnerable Configurations

References