Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cf4w-jr22-49m6

Опубликовано: 14 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

EPSS

Процентиль: 5%
0.00022
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-306
CWE-862

Связанные уязвимости

CVSS3: 5.9
nvd
около 2 лет назад

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

EPSS

Процентиль: 5%
0.00022
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-306
CWE-862