Skip to content
OpenAdvisories
High · 8.8 CVE-2024-6672 EUVD-2024-47723GHSA-jp4g-q362-wf3h

WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability

Published Aug 29, 2024 · Updated Aug 30, 2024 · Assigned by ProgressSoftware

Description

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password.

Affected products

VendorProductAffectedFixed
Progress Software WhatsUp Gold 2023.1.0 – < 2024.0.0 2024.0.0

Advisories 1

References