CVE-2024-12108: WhatsUp Gold - Public API signing key rotation issue
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WhatsUp Goldto a version that resolves this vulnerability.Fixed in 2024.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12108?
CVE-2024-12108 has been classified as a critical vulnerability due to its potential to allow unauthorized access to the WhatsUp Gold server.
How do I fix CVE-2024-12108?
To resolve CVE-2024-12108, upgrade your WhatsUp Gold installation to version 2024.0.2 or later.
Which versions of WhatsUp Gold are affected by CVE-2024-12108?
CVE-2024-12108 affects all WhatsUp Gold versions prior to 2024.0.2.
What kind of access can an attacker gain through CVE-2024-12108?
An attacker can gain unauthorized access to the WhatsUp Gold server via its public API.
What are the implications of CVE-2024-12108 for network security?
CVE-2024-12108 poses a significant risk as it allows attackers to exploit the API to control or disrupt networking monitoring functions.