VDB
BDU%3A2024-05764
BDU%3A2024-05764
PUBLISHED
CVSS 10 CRITICAL
Уязвимость метода GetFileWithoutZip системы мониторинга сетевой инфраструктуры WhatsUp Gold, позволяющая нарушителю выполнять произвольный код на сервере
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress Software Corporation | WhatsUp Gold |
Timeline
- Jul 29, 2024 CVE Published
- Mar 4, 2025 CVE Updated
References
- https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 url
- https://www.itsec.ru/news/cve-2024-4885-prevratila-instrument-whatsup-gold-v-oruzhiye-kiberprestupnikov url
- https://www.securitylab.ru/news/549990.php url
- https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ url
- https://www.zerodayinitiative.com/advisories/ZDI-24-893/ url
- https://github.com/sinsinology/CVE-2024-4885 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url