CVEvulnerability
CVE-2023-6595
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-12-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-306
Description
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.
Affected configurations
• progress whatsup gold (< 23.1.0)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023 Vendor Advisory
- https://www.progress.com/network-monitoring Product
- https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023 Vendor Advisory
- https://www.progress.com/network-monitoring Product