← Database

CVE-2024-5009

HIGH CVSS: 8.4 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-269, NVD-CWE-noinfo

References