CVE-2024-12105

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure...

Progress WhatsUp Gold SnmpExtendedActiveMonitor path traversal vulnerability

Talos Vulnerability Report TALOS-2024-2089 Progress WhatsUp Gold SnmpExtendedActiveMonitor path traversal vulnerability January 8, 2025 CVE Number CVE-2024-12105 SUMMARY A path traversal vulnerability exists in the handling of SnmpExtendedActiveMonitor requests in Progress WhatsUp Gold 24.0.1 Bui...

CVE-2024-12105

creationtimestamp| type| source ---|---|--- 2024-12-31 12:52:31+00:00| seen| https://t.me/cvedetector/14003 2025-01-02 15:34:59+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113759492380346040 2025-01-06 04:15:18+00:00| seen|...

CVE-2024-12105 WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure...

CVE-2024-12105 WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure...

CVE-2024-12105

Talos TALOS-2024-2089 describes a path traversal vulnerability in Progress WhatsUp Gold 24.0.1 Build 2177 (Total Plus Edition) via the SnmpExtendedActiveMonitor functionality. An authenticated user can craft a request to SNMP Extended Monitor actions (xmlFileName parameter) which is used unsafely...