Description
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | WhatsUp Gold | 2023.1.0 – < 2024.0.0 | 2024.0.0 |
Advisories 1
- NCSC-2024-0355 Kwetsbaarheden verholpen in Progress WhatsUp Gold NCSC-NL (Netherlands) · Sep 2, 2024