ZDI-24-1512: Progress Software WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-7763.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1512?
The severity of ZDI-24-1512 is rated at 9.8 on the CVSS scale.
How do I fix ZDI-24-1512?
To fix ZDI-24-1512, upgrade to the latest version of Progress Software WhatsUp Gold that addresses this vulnerability.
What type of vulnerability is ZDI-24-1512?
ZDI-24-1512 is an authentication bypass vulnerability that allows remote attackers to exploit affected systems without authentication.
Which software is affected by ZDI-24-1512?
The affected software for ZDI-24-1512 is Progress Software WhatsUp Gold.
Are there any known exploits for ZDI-24-1512?
Yes, remote attackers can exploit ZDI-24-1512 without needing authentication, making it a critical threat.