CVE-2022-29845

In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-05-11

Last modified

2024-08-03

Weaknesses

CWE-829

Affected products

• Whatsup Gold (Progress)

References

• https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022
• https://www.progress.com/network-monitoring