CVE-2024-4884: WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController
allows execution of commands with iisapppool\nmconsole privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress WhatsUpGoldto a version that resolves this vulnerability.Fixed in 2023.1.3 - Compensating control
Restrict network access so that the Apm.UI.Areas.APM.Controllers.CommunityController endpoint cannot be reached by unauthenticated users (e.g., block/allow at firewall or via network ACL/WAF) to mitigate the unauthenticated Remote Code Execution and unrestricted file upload path.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4884?
CVE-2024-4884 has been classified as a critical severity vulnerability due to its potential for unauthenticated remote code execution.
How do I fix CVE-2024-4884?
To mitigate CVE-2024-4884, upgrade your Progress WhatsUp Gold instance to version 23.1.3 or later.
What versions of WhatsUp Gold are affected by CVE-2024-4884?
CVE-2024-4884 affects all versions of Progress WhatsUp Gold released before 23.1.3.
What type of vulnerability is CVE-2024-4884?
CVE-2024-4884 is categorized as an unauthenticated remote code execution vulnerability.
What are the potential risks of CVE-2024-4884?
If exploited, CVE-2024-4884 could allow attackers to execute arbitrary commands on the affected system with elevated privileges.