CVE-2022-29848: SSRF
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29848?
CVE-2022-29848 is a vulnerability in Ipswitch WhatsUp Gold versions 17.0.0 through 21.1.1 and 22.0.0 that allows authenticated users to read sensitive operating system attributes from a host accessible by the WhatsUp Gold system.
What software is affected by CVE-2022-29848?
Ipswitch WhatsUp Gold versions 17.0.0 through 21.1.1 and version 22.0.0 are affected by CVE-2022-29848.
What is the severity of CVE-2022-29848?
CVE-2022-29848 has a severity level of medium (6.5).
How can an authenticated user exploit CVE-2022-29848?
An authenticated user can exploit CVE-2022-29848 by invoking an API transaction that allows them to read sensitive operating system attributes from a host accessible by the WhatsUp Gold system.
Are there any references for CVE-2022-29848?
Yes, the following references provide more information about CVE-2022-29848: - [Progress Community Article](https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022) - [Progress Network Monitoring](https://www.progress.com/network-monitoring)