CVE-2023-6368: WhatsUp Gold Unauthenticated Access to an API Endpoint
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6368?
CVE-2023-6368 is classified as a high severity vulnerability due to the potential for unauthorized information enumeration.
How do I fix CVE-2023-6368?
To mitigate CVE-2023-6368, upgrade WhatsUp Gold to version 2023.1 or later.
What type of information can be leaked due to CVE-2023-6368?
CVE-2023-6368 allows an unauthenticated attacker to enumerate information related to registered devices monitored by WhatsUp Gold.
Which versions of WhatsUp Gold are affected by CVE-2023-6368?
CVE-2023-6368 affects all versions of WhatsUp Gold released before 2023.1.
Is authentication required to exploit CVE-2023-6368?
No, CVE-2023-6368 can be exploited by an unauthenticated attacker without the need for authentication.