ZDI-CAN-23661: ZDI-24-1512: Progress Software WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-7763.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23661?
The severity of ZDI-CAN-23661 is rated at 9.8 on the CVSS scale, indicating a critical vulnerability.
How do I fix ZDI-CAN-23661?
To fix ZDI-CAN-23661, apply the latest security patches provided by Progress Software for WhatsUp Gold.
What impact does ZDI-CAN-23661 have on Progress Software WhatsUp Gold?
ZDI-CAN-23661 allows remote attackers to bypass authentication, potentially leading to unauthorized access and exploitation of the system.
Is user authentication required to exploit ZDI-CAN-23661?
No, user authentication is not required to exploit ZDI-CAN-23661, making it particularly dangerous.
What should organizations do if they are affected by ZDI-CAN-23661?
Organizations affected by ZDI-CAN-23661 should immediately secure their installations by updating to the latest version of WhatsUp Gold.