Vulnerabilities > CVE-2024-5010 - Unspecified vulnerability in Progress Whatsup Gold

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

progress

NVD

Published: 2024-06-25

Updated: 2024-09-06

Summary

In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted unauthenticated HTTP request can lead to a disclosure of sensitive information.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Whatsup Gold - Progress Whatsup Gold 7.0 Progress Whatsup Gold 7.03 Progress Whatsup Gold 7.04 Progress Whatsup Gold 8.0 Progress Whatsup Gold 8.01 Progress Whatsup Gold 8.03 Progress Whatsup Gold 11 Progress Whatsup Gold 15.02 Progress Whatsup Gold 16.3 Progress Whatsup Gold 16.4 Progress Whatsup Gold 17.1.1 Progress Whatsup Gold 18.0 Progress Whatsup Gold 21.1.0 Progress Whatsup Gold 21.1.1 Progress Whatsup Gold 21.1.2 Progress Whatsup Gold 22.0.0 Progress Whatsup Gold 22.0.1 Progress Whatsup Gold 22.0.2 Progress Whatsup Gold 22.1.0 Progress Whatsup Gold 23.0.0 Progress Whatsup Gold 23.0.1 Progress Whatsup Gold 23.0.2 Progress Whatsup Gold 23.1.0 Progress Whatsup Gold 23.1.1 Progress Whatsup Gold 23.1.2	27

Summary

Vulnerable Configurations

References