CVE-2024-1189
Last modified
CVE-2024-1189 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encryption Passphrase Handler. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encryption Passphrase Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252679. NOTE: The vendor explains that AMPPS 4.0 is a complete overhaul and the code was re-written.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Softaculous | Ampps | < 4.0 |
References
- https://fitoxs.com/vuldb/15-exploit-perl.txtExploit, Third Party Advisory
- https://vuldb.com/?ctiid.252679Permissions Required, Third Party Advisory
- https://vuldb.com/?id.252679Permissions Required, Third Party Advisory
- https://fitoxs.com/vuldb/15-exploit-perl.txtExploit, Third Party Advisory
- https://vuldb.com/?ctiid.252679Permissions Required, Third Party Advisory
- https://vuldb.com/?id.252679Permissions Required, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-1189?
How severe is CVE-2024-1189?
How do I fix CVE-2024-1189?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-11884The Wp photo text slider 50 plugin for WordPress is vulnerab…6.4
- CVE-2024-11885The NinjaTeam Chat for Telegram plugin for WordPress is vuln…6.4
- CVE-2024-11886The Contact Form and Calls To Action by vcita plugin for Wor…6.4
- CVE-2024-11887The Geo Content plugin for WordPress is vulnerable to Stored…6.4
- CVE-2024-11888The IDer Login for WordPress plugin for WordPress is vulnera…6.4
- CVE-2024-11889The My IDX Home Search plugin for WordPress is vulnerable to…6.4
- CVE-2024-11890Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2024-11891The Perfect Font Awesome Integration plugin for WordPress is…6.4
- CVE-2024-11892The Accordion Slider Lite plugin for WordPress is vulnerable…6.4
- CVE-2024-11893The Spoki – Chat Buttons and WooCommerce Notifications plugi…6.4
- CVE-2024-11894The The Permalinker plugin for WordPress is vulnerable to St…6.4
- CVE-2024-11895The Online Payments – Get Paid with PayPal, Square & Stripe …5.4
Are you affected by CVE-2024-1189?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
