ZDI-24-887: Progress Software WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure Vulnerability
Published Jul 3, 2024
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2024-5014.
Affected Software
1 affected component
Progress Software WhatsUp Gold
Event History
Jul 3, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-24-887?
The severity of ZDI-24-887 is rated at 7.1 on the CVSS scale.
2
How do I fix ZDI-24-887?
To fix ZDI-24-887, update to the latest version of Progress Software WhatsUp Gold that addresses this vulnerability.
3
What type of attack does ZDI-24-887 involve?
ZDI-24-887 allows remote attackers to disclose sensitive information, requiring authentication for exploitation.
4
Is authentication required to exploit ZDI-24-887?
Yes, authentication is required to exploit ZDI-24-887.
5
Does ZDI-24-887 affect all versions of WhatsUp Gold?
ZDI-24-887 affects specific installations of Progress Software WhatsUp Gold, so check your version for susceptibility.