CVE-2024-12106: WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication
Published Dec 31, 2024
·Updated
In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings.
Affected Software
1 affected component
Progress WhatsUp Gold>=23.1.0<24.0.2
Event History
Dec 31, 2024
CVE Published
via MITRE·10:32 AM
Data Sourced
via MITRE·10:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-12106?
CVE-2024-12106 is considered to have a critical severity due to its potential for unauthenticated access to LDAP settings.
2
How do I fix CVE-2024-12106?
To fix CVE-2024-12106, upgrade to WhatsUp Gold version 2024.0.2 or later.
3
Who is affected by CVE-2024-12106?
CVE-2024-12106 affects all versions of WhatsUp Gold prior to 2024.0.2.
4
What can an attacker do with CVE-2024-12106?
An attacker can configure LDAP settings without authentication, potentially leading to unauthorized access.
5
Is there a workaround for CVE-2024-12106?
There are no official workarounds for CVE-2024-12106 other than upgrading to a patched version.