CVE-2024-1189: AMPPS Encryption Passphrase denial of service
A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encryption Passphrase Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252679. NOTE: The vendor explains that AMPPS 4.0 is a complete overhaul and the code was re-written.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AMPPS Encryption Passphrase Handlerto a version that resolves this vulnerability.Fixed in 4.0Patch VDB-252679
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1189?
CVE-2024-1189 is classified as a problematic vulnerability with a denial of service impact.
How do I fix CVE-2024-1189?
To remediate CVE-2024-1189, upgrade AMPPS to a version above 4.0 to eliminate the vulnerability.
What components of AMPPS are affected by CVE-2024-1189?
CVE-2024-1189 affects the Encryption Passphrase Handler functionality within AMPPS.
Can CVE-2024-1189 be exploited remotely?
Yes, CVE-2024-1189 can be exploited remotely, leading to a denial of service.
What versions of AMPPS are impacted by CVE-2024-1189?
Versions of AMPPS prior to 4.0 are impacted by CVE-2024-1189.