CVE-2024-5010: WhatsUp Gold TestController multiple information disclosure vulnerabilities
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted
unauthenticated
HTTP request can lead to a disclosure of sensitive information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WhatsUp Gold TestControllerto a version that resolves this vulnerability.Fixed in 2023.1.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5010?
CVE-2024-5010 is categorized as a medium severity vulnerability due to its potential for unauthorized information disclosure.
How do I fix CVE-2024-5010?
To mitigate CVE-2024-5010, update your WhatsUp Gold software to version 2023.1.3 or later.
What kind of information can be disclosed due to CVE-2024-5010?
CVE-2024-5010 allows for the potential disclosure of sensitive information through unauthenticated HTTP requests.
Which versions of WhatsUp Gold are affected by CVE-2024-5010?
CVE-2024-5010 affects all WhatsUp Gold versions prior to 2023.1.3.
Is CVE-2024-5010 specific to a certain functionality in WhatsUp Gold?
Yes, CVE-2024-5010 specifically affects the TestController functionality within WhatsUp Gold.