Lucene search
HistoryJun 25, 2024 - 9:16 p.m.
CVE-2024-5012
cve-2024-5012
authentication
disclosure
windows credentials
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored in the product Credential Library.
Affected configurations
Node
progresswhatsup_goldRange<23.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| progress | whatsup_gold | * | cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-5012
2024-06-25 21:16:00
nessus
nessus
Progress WhatsUp Gold < 23.1.3 Multiple Vulnerabilities (000258130)
2024-08-07 00:00:00
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
Related for NVD:CVE-2024-5012