CVE-2024-1189: 
Homebrew vulnerability analysis and mitigation

A vulnerability has been discovered in AMPPS 2.7 affecting the Encryption Passphrase Handler component. The vulnerability was identified in January 2024 and has been assigned CVE-2024-1189. The issue affects AMPPS versions up to (but not including) 4.0 (NVD).

The vulnerability is classified as a denial of service (DoS) issue with a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The flaw exists in the Encryption Passphrase Handler component and can be exploited remotely without requiring authentication (NVD).

When successfully exploited, this vulnerability leads to a denial of service condition, potentially making the application unavailable to legitimate users. The attack can be launched remotely, increasing its potential impact on affected systems (NVD).

The vulnerability is exploitable remotely and proof-of-concept exploit code has been publicly disclosed. The exploit involves manipulating the Encryption Passphrase Handler functionality, which can be triggered through a specially crafted request (Exploit POC).

The vendor has addressed this vulnerability in AMPPS version 4.0, which is a complete overhaul with rewritten code. Users are strongly recommended to upgrade to version 4.0 to mitigate this security issue (NVD).