CVE-2022-29845

2022-05-1117:55:49

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.

References

community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022

www.progress.com/network-monitoring