ZDI-CAN-22319: ZDI-24-895: Progress Software WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability
Published Jul 3, 2024
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-5008.
Affected Software
1 affected component
Progress Software WhatsUp Gold
Event History
Jul 3, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-22319?
ZDI-CAN-22319 has been assigned a CVSS rating of 8.8, indicating high severity.
2
How do I fix ZDI-CAN-22319?
To fix ZDI-CAN-22319, apply the latest patches provided by Progress Software for WhatsUp Gold.
3
What systems are affected by ZDI-CAN-22319?
ZDI-CAN-22319 affects installations of Progress Software WhatsUp Gold.
4
Can ZDI-CAN-22319 be exploited without authentication?
No, ZDI-CAN-22319 requires authentication for exploitation.
5
What type of attack does ZDI-CAN-22319 facilitate?
ZDI-CAN-22319 allows remote attackers to execute arbitrary code on affected systems.