{"id":"CVE-2024-5010","published":"2024-06-25T20:00:07Z","modified":"2025-02-13T17:53:45Z","title":"WhatsUp Gold TestController multiple information disclosure vulnerabilities","vendor":"Progress Software Corporation","product":"WhatsUp Gold","tier":"core","eol":null,"affectedVersions":[{"vendor":"Progress Software Corporation","product":"WhatsUp Gold","versions":[">= 2023.1.0, < 2023.1.3"]}],"description":{"text":"In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specially crafted \n\nunauthenticated\n\nHTTP request can lead to a disclosure of sensitive information.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in the TestController functionality of Progress Software's WhatsUp Gold lets specially crafted requests disclose sensitive information. An unauthenticated attacker with network access to the product can exploit it by sending a crafted HTTP request, with no user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:17:34Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.69952,"percentile":0.99372,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://www.progress.com/network-monitoring","tags":["product"]},{"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024","tags":["vendor-advisory"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1933","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-47139","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47139","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-06-25","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-5010","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":25.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.87,"detail":"percentile 0.9937"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}