CVE-2024-5013

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service

vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
Progress Software CorporationWhatsUp Gold>= 2023.1.0, < 2023.1.3
progresswhatsup_gold>= 2023.1.0, < 2023.1.3

References

Timeline

Published
Jun 25, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-501307.8In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: must hold reference on net namespace BUG: KASAN: slab-CVE-2024-501317.8In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length CVE-2024-501325.5In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix MAX_TRACE_ARGS limit handling When creating a tracCVE-2024-501335.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks without vDSO Not all tCVE-2024-501345.5In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape withCVE-2024-501354.7In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvme_dev_disable() nvmeCVE-2024-501365.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister notifier on eswitch init failure It otherwise remCVE-2024-501375.5In the Linux kernel, the following vulnerability has been resolved: reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC CVE-2024-501385.5In the Linux kernel, the following vulnerability has been resolved: bpf: Use raw_spinlock_t in ringbuf The function __bpf_ringbuf_reserve CVE-2024-501395.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shift-out-of-bounds bug CVE-2024-50146.5In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This alloCVE-2024-501405.5In the Linux kernel, the following vulnerability has been resolved: sched/core: Disable page allocation in task_tick_mm_cid() With KASAN a
CVE-2024-5013: High severity, CVSS 7.5 | Vulnix