CVE-2022-29845: Medium severity progress software whatsup gold vulnerability
In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29845?
CVE-2022-29845 is a vulnerability in Ipswitch WhatsUp Gold 21.1.0 through 21.1.1 and 22.0.0 that allows an authenticated user to read the contents of a local file.
How severe is CVE-2022-29845?
CVE-2022-29845 has a severity rating of 6.5, which is classified as medium.
How can an authenticated user exploit CVE-2022-29845?
An authenticated user can exploit CVE-2022-29845 by invoking an API transaction that allows them to read the contents of a local file.
Which versions of Ipswitch WhatsUp Gold are affected by CVE-2022-29845?
CVE-2022-29845 affects Ipswitch WhatsUp Gold versions 21.1.0, 21.1.1, and 22.0.0.
Are there any references for CVE-2022-29845?
Yes, you can refer to the following links for more information: [link1](https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022) and [link2](https://www.progress.com/network-monitoring).