2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","modules":["API Endpoint"],"platforms":["Windows"],"product":"WhatsUp Gold","vendor":"Progress Software Corporation","versions":[{"lessThan":"2023.1.3","status":"affected","version":"2023.1.0","versionType":"semver"}]}],"source":"security@progress.com"},{"affectedData":[{"cpes":["cpe:2.3:a:progress:whatsup_gold:2023.1.0:*:*:*:*:*:*:*"],"defaultStatus":"affected","product":"whatsup_gold","vendor":"progress","versions":[{"lessThan":"2023.1.3","status":"affected","version":"2023.1.0","versionType":"semver"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","matchCriteriaId":"C22487E3-6723-40C7-86A0-764EBAA37A55","versionEndExcluding":"23.1.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController\n\n allows execution of commands with iisapppool\\nmconsole privileges."},{"lang":"es","value":"En las versiones de WhatsUp Gold lanzadas antes de 2023.1.3, se detectó una vulnerabilidad de ejecución remota de código no autenticada en WhatsUpGold en curso. Apm.UI.Areas.APM.Controllers.CommunityController permite la ejecución de comandos con privilegios de iisapppool\\nmconsole."}],"id":"CVE-2024-4884","lastModified":"2026-06-17T08:03:06.203","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"security@progress.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4884","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-06-26T00:00:00+00:00","version":"2.0.3"}}]},"published":"2024-06-25T20:15:12.547","references":[{"source":"security@progress.com","tags":["Vendor Advisory"],"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024"},{"source":"security@progress.com","tags":["Product"],"url":"https://www.progress.com/network-monitoring"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"],"url":"https://www.progress.com/network-monitoring"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"},{"lang":"en","value":"CWE-78"},{"lang":"en","value":"CWE-94"}],"source":"security@progress.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}
|