ZDI-CAN-23662: ZDI-24-1186: Progress Software WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability
Published Aug 29, 2024
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-6671.
Affected Software
1 affected component
Progress Software WhatsUp Gold
Event History
Aug 29, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-23662?
ZDI-CAN-23662 has a CVSS rating of 9.8, indicating a critical severity level.
2
How do I fix ZDI-CAN-23662?
To fix ZDI-CAN-23662, update Progress Software WhatsUp Gold to the latest version provided by the vendor.
3
What type of vulnerability is ZDI-CAN-23662?
ZDI-CAN-23662 is an authentication bypass vulnerability.
4
Can ZDI-CAN-23662 be exploited remotely?
Yes, ZDI-CAN-23662 allows remote attackers to exploit the vulnerability without requiring authentication.
5
What software is affected by ZDI-CAN-23662?
ZDI-CAN-23662 affects installations of Progress Software WhatsUp Gold.