What is CVE-2024-5013?

CVE-2024-5013 is a high-severity vulnerability in Progress Whatsup Gold, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2024-06-25.

How severe is CVE-2024-5013?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Progress Whatsup Gold

CVE-2024-5013

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.008 (54.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Progress Whatsup_gold
Progress Software Corporation Whatsup Gold — versions 2023.1.0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

security@progress.com (Product, product)
security@progress.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-5013?: CVE-2024-5013 is a high-severity vulnerability in Progress Whatsup Gold, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2024-06-25.
How severe is CVE-2024-5013?: High severity. CVSS v3 base score is 7.5 out of 10.