Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wq29-3hm6-r46x

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

EPSS

Процентиль: 21%
0.00069
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.8
nvd
почти 8 лет назад

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

CVSS3: 9.8
fstec
почти 8 лет назад

Уязвимость исполняемого файла NmAPI.exe системы мониторинга сетевой инфраструктуры WhatsUp Gold, позволяющая нарушителю получить несанкционированный доступ к системе WatsUp Gold или выполнить удаленные команды

EPSS

Процентиль: 21%
0.00069
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-918