CVE-2024-46908: WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability
Published Dec 2, 2024
·Updated
In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required)
to achieve privilege escalation to the admin account.
Affected Software
1 affected component
Progress WhatsUp Gold<24.0.1
Event History
Dec 2, 2024
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-46908?
CVE-2024-46908 has been classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-46908?
To fix CVE-2024-46908, upgrade WhatsUp Gold to version 2024.0.1 or later.
3
Who is affected by CVE-2024-46908?
CVE-2024-46908 affects authenticated low-privileged users with at least Report Viewer permissions in WhatsUp Gold versions prior to 2024.0.1.
4
What type of vulnerability is CVE-2024-46908?
CVE-2024-46908 is a SQL injection vulnerability that allows privilege escalation.
5
What can an attacker do with CVE-2024-46908?
An attacker exploiting CVE-2024-46908 can escalate their privileges to gain access to administrative capabilities.