Vulnerability record · CVE-2024-5010 · published 25 June 2024
CVE-2024-5010: WhatsUp Gold TestController unauthenticated information disclosure
Progress · Whatsup Gold
WhatsUp Gold versions before 2023.1.3 expose sensitive information through the TestController functionality. A specially crafted unauthenticated HTTP request can trigger the disclosure, making the flaw remotely reachable without credentials. Because WhatsUp Gold is a network monitoring platform, leaked data may aid further intrusion.
Description
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted unauthenticated HTTP request can lead to a disclosure of sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Automated analysis
high priorityUnauthenticated remote information disclosure with a high EPSS score and no KEV listing, warranting prompt patching.
What it is
WhatsUp Gold versions before 2023.1.3 expose sensitive information through the TestController functionality. A specially crafted unauthenticated HTTP request can trigger the disclosure, making the flaw remotely reachable without credentials. Because WhatsUp Gold is a network monitoring platform, leaked data may aid further intrusion.
Impact
An attacker gains access to sensitive information returned by the TestController endpoint. The exact data exposed is not specified in the record, so the full scope of the leak cannot be confirmed.
Attack surface
Reachable over the network via HTTP against the TestController functionality; the CVSS vector shows no privileges or user interaction required. No authentication is needed per the description.
Exploitation
Not listed in CISA KEV and no public exploit references are tagged in the record, but EPSS is high at 0.69952 (99.3rd percentile), indicating elevated likelihood of exploitation activity.
What to do
- Upgrade WhatsUp Gold to 2023.1.3 or later per the Progress security bulletin.
- Restrict network access to the WhatsUp Gold web interface to trusted management networks.
- Monitor vendor advisories and apply any follow-up patches for the TestController component.
- Review logs for anomalous unauthenticated requests to TestController endpoints.
Detection
- Alert on unauthenticated HTTP requests to TestController paths in web server or application logs.
- Baseline normal TestController traffic and flag unusual request patterns or payloads.
- Correlate outbound data volume or response anomalies from the WhatsUp Gold host.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 | Vendor Advisory |
| https://www.progress.com/network-monitoring | Product |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1933 | Third Party Advisory |
| https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 | Vendor Advisory |
| https://www.progress.com/network-monitoring | Product |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1933 | Third Party Advisory |
Track CVE-2024-5010 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2024-5010), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
