{"id":"CVE-2024-12108","aliases":["EUVD-2024-50602","GHSA-5c87-492r-w9m4"],"status":"published","title":"WhatsUp Gold - Public API signing key rotation issue","description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.07677,"percentile":0.94672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290"],"published":"2024-12-31T10:31:56Z","modified":"2026-11-03T21:52:31Z","products":[{"vendor":"progress","product":"whatsup_gold"},{"vendor":"progress software corporation","product":"whatsup gold"}],"references":[{"url":"https://www.progress.com/network-monitoring","tags":["Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12108"},{"url":"https://github.com/advisories/GHSA-5c87-492r-w9m4"}],"sources":{"cve":[{"id":"CVE-2024-12108","title":"WhatsUp Gold - Public API signing key rotation issue","description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","status":"published","published":"2024-12-31T10:31:56.107Z","modified":"2026-11-03T23:51:56.886Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-290"],"updated_at":"2026-11-04T00:47:47.540303Z"}],"euvd":[{"id":"EUVD-2024-50602","description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","status":"published","published":"2024-12-31T10:31:56Z","modified":"2026-11-03T21:52:31Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T23:01:35.931968Z"}],"ghsa":[{"id":"GHSA-5c87-492r-w9m4","title":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp...","description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","status":"published","published":"2024-12-31T12:30:44Z","modified":"2024-12-31T12:30:50Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:59:17.598219Z"}],"nvd":[{"id":"CVE-2024-12108","description":"In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.","status":"published","published":"2024-12-31T11:15:06.78Z","modified":"2026-11-03T22:17:12.84Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"primary"}],"cwes":["CWE-290"],"updated_at":"2026-11-04T00:47:54.173626Z"}]}}