HTTP: Progress WhatsUp Gold TestController Chart Denial Of Service Vulnerability

This signature detects attempts to exploit a known vulnerability against Progress WhatsUp Gold TestController Chart. A successful attack can result in a denial-of-service condition.

Extended Description

In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists.A specially crafted unauthenticated HTTP requestto the TestController Chart functionalitycan lead to denial of service.

Affected Products

Progress whatsup_gold

References

CVE: CVE-2024-5011

Short Name
HTTP:CTS:PGRS-WHTSUP-DOS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2024-5011 Chart Denial Gold Of Progress Service TestController Vulnerability WhatsUp
Release Date
08/14/2024
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3739
False Positive
Unknown
Vendors

Progress

Found a potential security threat?