ZDI-CAN-23663: ZDI-24-892: Progress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

Published Jul 3, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-4883.

Affected Software

1 affected component

Progress Software WhatsUp Gold

Event History

Jul 3, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-23663?

The severity of ZDI-CAN-23663 is rated at 9.8 on the CVSS scale, indicating a critical vulnerability.

How do I fix ZDI-CAN-23663?

To fix ZDI-CAN-23663, update to the latest version of Progress Software WhatsUp Gold that includes the security patch.

What type of attack can ZDI-CAN-23663 facilitate?

ZDI-CAN-23663 allows remote attackers to execute arbitrary code on affected installations without requiring authentication.

Which software is affected by ZDI-CAN-23663?

Progress Software WhatsUp Gold is the affected software associated with vulnerability ZDI-CAN-23663.

Is authentication required to exploit ZDI-CAN-23663?

No, authentication is not required to exploit vulnerability ZDI-CAN-23663.