2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","modules":["Installation"],"platforms":["Windows"],"product":"WhatsUp Gold","vendor":"Progress Software Corporation","versions":[{"lessThan":"2023.1.3","status":"affected","version":"2023.1.0","versionType":"semver"}]}],"source":"security@progress.com"},{"affectedData":[{"cpes":["cpe:2.3:a:progress:whatsup_gold:2023.1.0:*:*:*:*:*:*:*"],"defaultStatus":"affected","product":"whatsup_gold","vendor":"progress","versions":[{"lessThan":"2023.1.3","status":"affected","version":"2023.1.0","versionType":"semver"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","matchCriteriaId":"C22487E3-6723-40C7-86A0-764EBAA37A55","versionEndExcluding":"23.1.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service \n\nvulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible."},{"lang":"es","value":"En las versiones de WhatsUp Gold lanzadas antes de 2023.1.3, se identificó una vulnerabilidad de denegación de servicio no autenticada. Un atacante no autenticado puede colocar la aplicación en el paso de instalación SetAdminPassword, lo que hace que la aplicación no sea accesible."}],"id":"CVE-2024-5013","lastModified":"2026-06-17T08:14:54.387","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security@progress.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-5013","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-26T14:03:25.828079Z","version":"2.0.3"}}]},"published":"2024-06-25T21:16:00.510","references":[{"source":"security@progress.com","tags":["Vendor Advisory"],"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024"},{"source":"security@progress.com","tags":["Product"],"url":"https://www.progress.com/network-monitoring"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"],"url":"https://www.progress.com/network-monitoring"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"security@progress.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|