PT-2024-17325 · Ampps · Ampps

Fernando Mengali + 1 · Published 2024-02-02 · Updated 2024-05-17 · CVE-2024-1189

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AMPPS version 2.7

Description A vulnerability has been found in the Encryption Passphrase Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. Upgrading to version 4.0 is able to address this issue.

Recommendations For AMPPS version 2.7, upgrade to version 4.0 to address the issue. As a temporary workaround, consider restricting access to the Encryption Passphrase Handler component until the upgrade is applied.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-1189

Affected Products

Ampps

References · 9

• 🔥 https://fitoxs.com/vuldb/15-exploit-perl.txt · Exploit
• https://osv.dev/vulnerability/CVE-2024-1189 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1189 · Security Note
• https://twitter.com/VulmonFeeds/status/1753533136481276148 · Twitter Post
• https://t.me/cvenotify/70906 · Telegram Post
• https://twitter.com/CVEnew/status/1753491575102214383 · Twitter Post
• https://t.me/cvenotify/71781 · Telegram Post
• https://vuldb.com/?id.252679 · Note
• https://vuldb.com/?ctiid.252679 · Note