Skip to content
OpenAdvisories
Unscored CVE-2018-8939 EUVD-2018-20547GHSA-wq29-3hm6-r46x

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted reques…

Published May 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

References