Описание
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.
Ссылки
- Vendor Advisory
- Product
- Vendor Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 23.1.0 (исключая)
cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.00022
Низкий
5.9 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-306
CWE-306
Связанные уязвимости
CVSS3: 5.9
github
около 2 лет назад
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.
EPSS
Процентиль: 5%
0.00022
Низкий
5.9 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-306
CWE-306