Vulnerability Description
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress | Whatsup Gold | >= 17.0.0, <= 21.1.1 |
Related Weaknesses (CWE)
References
- https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-MayVendor Advisory
- https://www.progress.com/network-monitoringProduct
- https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-MayVendor Advisory
- https://www.progress.com/network-monitoringProduct
FAQ
What is CVE-2022-29848?
CVE-2022-29848 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attr...
How severe is CVE-2022-29848?
CVE-2022-29848 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29848?
Check the references section above for vendor advisories and patch information. Affected products include: Progress Whatsup Gold.