Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2jqj-w7h9-j4g2

Опубликовано: 14 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

EPSS

Процентиль: 55%
0.00331
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-862

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 лет назад

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

EPSS

Процентиль: 55%
0.00331
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-862