ZDI-CAN-23564: ZDI-24-887: Progress Software WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure Vulnerability

Published Jul 3, 2024

Updated

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2024-5014.

Affected Software

1 affected component

Progress Software WhatsUp Gold

Event History

Jul 3, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-23564?

The severity of ZDI-CAN-23564 is rated at 7.1 on the CVSS scale.

What is the nature of the vulnerability ZDI-CAN-23564?

ZDI-CAN-23564 allows remote attackers to disclose sensitive information on affected installations of Progress Software WhatsUp Gold.

Is authentication required to exploit ZDI-CAN-23564?

Yes, authentication is required to exploit the vulnerability ZDI-CAN-23564.

Which software is affected by ZDI-CAN-23564?

The affected software for ZDI-CAN-23564 is Progress Software WhatsUp Gold.

How can I protect against ZDI-CAN-23564?

To protect against ZDI-CAN-23564, ensure that your installation of Progress Software WhatsUp Gold is updated to the latest version that addresses this vulnerability.