{"affected":[{"defaultStatus":"affected","platforms":["Windows"],"product":"WhatsUp Gold","source":"CNA: ProgressSoftware","vendor":"Progress Software Corporation","versions":[{"lessThan":"2024.0.2","status":"affected","version":"2023.1.0","versionType":"semver"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","versionEndExcluding":"24.0.2","versionStartIncluding":"23.1.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveId":"CVE-2024-12108","cwes":["CWE-290"],"description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","epss":{"date":"2026-11-03","percentile":0.94599,"score":0.07677},"exploits":[],"kev":null,"metrics":[{"score":9.6,"severity":"critical","source":"CNA: ProgressSoftware","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","version":"3.1"},{"score":9.6,"severity":"critical","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","version":"3.1"},{"score":9.6,"severity":"critical","source":"NVD: security@progress.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1793749916886,"publishedAt":1735641116107,"references":[{"source":"CNA: ProgressSoftware","tags":[],"url":"https://www.progress.com/network-monitoring"},{"source":"security@progress.com","tags":["Product"],"url":"https://www.progress.com/network-monitoring"}],"remediation":[],"revision":"a32c5deb7f8e8accbff3d8bd10fcb2f248db80432a8a32cd18006868759663e0","sources":[{"modifiedAt":1793749916886,"name":"CNA: ProgressSoftware","retrievedAt":1793750932924,"url":"https://www.cve.org/CVERecord?id=CVE-2024-12108"},{"modifiedAt":1793744232840,"name":"NVD","retrievedAt":1793751371085,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12108"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793743802530,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-12108"}],"ssvc":{"assessedAt":1736438190467,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"WhatsUp Gold - Public API signing key rotation issue","updatedAt":1793751371085}