CVE-2024-12105 WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure...

CVE-2024-12106 WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication

In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings...

CVE-2024-12106

CVE-2024-12106 affects Progress WhatsUp Gold versions before 2024.0.2. The vulnerability is an authentication-bypass-like issue where an unauthenticated attacker can configure LDAP settings through the product, exposing risk to access control and data integrity. Multiple connected sources corrobo...

CVE-2024-12106 WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication

In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings...

CVE-2024-12108

CVE-2024-12108 affects Progress WhatsUp Gold versions before 2024.0.2. The available connected sources indicate that an attacker can gain unauthorized access to the WhatsUp Gold server through the public API. The impact is described as high/critical in CVSS terms (network access, low attack compl...

CVE-2024-12108 WhatsUp Gold - Public API signing key rotation issue

In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API...

CVE-2024-12108 WhatsUp Gold - Public API signing key rotation issue

In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API...

PT-2024-17444 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2024.0.2 Description: An attacker can gain access to the WhatsUp Gold server via the public API. This issue allows unauthorized access, potentially leading to further exploitation. The estimated number of affect...

CVE-2024-12108: Authentication Bypass by Spoofing

In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API...

Progress Software WhatsUp Gold 安全漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold versions prior to...

Progress Software WhatsUp Gold 访问控制错误漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. An Access Control Error vulnerability exists in Progress Software WhatsUp Gold versions...

Progress Software WhatsUp Gold 路径遍历漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A path traversal vulnerability exists in versions of Progress Software WhatsUp Gold pri...

CVE-2024-12105: Improper Limitation of a Pathname to a Restricted Directory

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure...

PT-2024-17442 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2024.0.2 Description: An unauthenticated attacker can configure LDAP settings in WhatsUp Gold. Recommendations: For versions prior to 2024.0.2, update to version 2024.0.2 or later to resolve the issue. As a...

CVE-2024-12106: Missing Authentication for Critical Function

In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings...

The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to user accounts.

The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to user accounts...

The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to user data.

The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...

The vulnerability of the WhatsUp Gold network infrastructure monitoring system, related to errors when using privileged application programming interfaces (APIs), allows a hacker to execute arbitrary code.

The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to errors when privileged application programming interfaces APIs are used. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2023-32586

Missing Authorization vulnerability in TM Soundcloud Is Gold soundcloud-is-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through = 2.5.1...

CVE-2023-32586

Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1...