CVE-2023-6595

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

Score

CVSS 3.1 7.5 High

Status

Modified - security@progress.com

Published

2023-12-14

Last modified

2024-10-16

Weaknesses

CWE-306

Affected products

• Whatsup Gold (Progress)
• Whatsup Gold (Progress Software Corporation)

References

• https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023
• https://www.progress.com/network-monitoring