PT-2024-33942
CVE-2024-5011
·
Published
2024-06-25
·
Updated
2024-09-06
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
WhatsUp Gold versions prior to 2023.1.3
Description:
The issue is related to an uncontrolled resource consumption vulnerability. A specially crafted unauthenticated HTTP request to the "TestController Chart" functionality can lead to denial of service.
Recommendations:
For versions prior to 2023.1.3, update to version 2023.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the TestController Chart functionality to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾