Critical · 9.4 CVE-2024-12106 EUVD-2024-50600GHSA-h99j-qmgw-6ggg

WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication

Published Dec 31, 2024 · Updated Jan 4, 2025 · Assigned by ProgressSoftware

Description

In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings.

Vendor	Product	Affected	Fixed
Progress Software	WhatsUp Gold	2023.1.0 – < 2024.0.2	2024.0.2

CNA	v3.1	9.4
EUVD	v3.1	9.4