ZDI-24-517: Progress Software WhatsUp Gold FaviconController Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.2. The following CVEs are assigned: CVE-2024-4561.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-517?
The ZDI-24-517 vulnerability has a CVSS rating of 4.2, indicating a moderate level of severity.
What type of attack does ZDI-24-517 facilitate?
ZDI-24-517 allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold.
Is authentication required to exploit ZDI-24-517?
Yes, authentication is required to exploit the ZDI-24-517 vulnerability.
How do I fix ZDI-24-517?
To remediate ZDI-24-517, ensure that your installation of Progress Software WhatsUp Gold is updated to the latest version provided by the vendor.
What products are affected by ZDI-24-517?
ZDI-24-517 affects installations of Progress Software WhatsUp Gold.