CVE-2024-12108: WhatsUp Gold - Public API signing key rotation issue
Published Dec 31, 2024
·Updated
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.
Affected Software
2 affected components
All of the following
Progress WhatsUp Gold>=23.1.0<24.0.2
Microsoft Windows
Event History
Dec 31, 2024
CVE Published
via MITRE·10:31 AM
Data Sourced
via MITRE·10:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-12108?
CVE-2024-12108 has been classified as a critical vulnerability due to its potential to allow unauthorized access to the WhatsUp Gold server.
2
How do I fix CVE-2024-12108?
To resolve CVE-2024-12108, upgrade your WhatsUp Gold installation to version 2024.0.2 or later.
3
Which versions of WhatsUp Gold are affected by CVE-2024-12108?
CVE-2024-12108 affects all WhatsUp Gold versions prior to 2024.0.2.
4
What kind of access can an attacker gain through CVE-2024-12108?
An attacker can gain unauthorized access to the WhatsUp Gold server via its public API.
5
What are the implications of CVE-2024-12108 for network security?
CVE-2024-12108 poses a significant risk as it allows attackers to exploit the API to control or disrupt networking monitoring functions.