CVE-2023-6595: WhatsUp Gold Unauthenticated Access to an API Endpoint
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6595?
CVE-2023-6595 has been assessed as a high severity vulnerability due to the potential for unauthenticated access to sensitive credential information.
How do I fix CVE-2023-6595?
To mitigate CVE-2023-6595, upgrade WhatsUp Gold to version 2023.1 or later where the authentication mechanism was implemented for the affected API endpoint.
What versions of WhatsUp Gold are affected by CVE-2023-6595?
CVE-2023-6595 affects all versions of WhatsUp Gold released before 2023.1.
Can an attacker exploit CVE-2023-6595 remotely?
Yes, an unauthenticated attacker can remotely exploit CVE-2023-6595 to enumerate credential information.
What kind of information can be exposed by CVE-2023-6595?
CVE-2023-6595 allows unauthorized access to ancillary credential information stored within WhatsUp Gold.