Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-46909 EUVD-2024-42186GHSA-jmfh-cf2f-p74p

WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

Published Dec 2, 2024 · Updated Dec 2, 2024 · Assigned by ProgressSoftware

Description

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account.

Affected products

VendorProductAffectedFixed
Progress Software WhatsUp Gold 2023.1.0 – < 2024.0.1 2024.0.1

References