CVE-2024-5010CWE-200
WhatsUp Gold TestController multiple information disclosure vulnerabilities
High · published June 25, 2024
Patch now
High probability of exploitation
CVSS calls it high at 7.5. It sits in the 99.4th percentile for exploit probability.
What it is
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted
unauthenticated
HTTP request can lead to a disclosure of sensitive information.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.69952 · 99.4th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2024-06-25T20:00Z
EPSS history
Timeline