VDB
CVE-2024-5013
CVE-2024-5013
PUBLISHED
CVSS 7.5 HIGH
WhatsUp Gold InstallController Denial-of-Service Vulnerability
Reported by progresssoftware · Published June 25, 2024
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| whatsup_gold | progress | 2023.1.3, 23.1.3 |
| WhatsUp Gold | Progress Software Corporation | 2023.1.3 |
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Progress Software Corporation | WhatsUp Gold | 2023.1.0 |
| progress | whatsup_gold | 2023.1.0 |
| Progress Software Corporation | WhatsUp Gold | 2023.1.0 |
Timeline
- Jun 25, 2024 CVE Published
- Jun 26, 2024 EPSS Score (30 in total, the first dated here)
- Aug 1, 2024 CVE Updated
- Oct 5, 2024 Coalition ESS Score (7 in total, the first dated here)
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-5013
vulnetix vdb fixes CVE-2024-5013Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-5013/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart