CVE-2006-2355: Medium severity Ipswitch WhatsUp Professional vulnerability
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2355?
CVE-2006-2355 is considered to have a low severity level as it allows attackers to obtain full path information through error messages.
How do I fix CVE-2006-2355?
To fix CVE-2006-2355, ensure that your Ipswitch WhatsUp Professional software is updated to the latest version to mitigate path disclosure vulnerabilities.
What type of software is affected by CVE-2006-2355?
CVE-2006-2355 affects Ipswitch WhatsUp Professional versions 2006 and 2006 Premium.
Can CVE-2006-2355 lead to further attacks?
While CVE-2006-2355 itself is a path disclosure issue, it can potentially assist attackers in conducting more targeted attacks if they gather sensitive information.
Is CVE-2006-2355 a common vulnerability?
CVE-2006-2355 is not commonly exploited but indicates a typical misconfiguration issue that can occur in many web applications.