1. Home
  2. CVE Database
  3. CVE-2023-6595
HIGH · 7.5

CVE-2023-6595

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential i...

Vulnerability Description

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ProgressWhatsup Gold< 23.1.0

Related Weaknesses (CWE)

CWE-306

References

FAQ

What is CVE-2023-6595?

CVE-2023-6595 is a vulnerability with a CVSS score of 7.5 (HIGH). In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential i...

How severe is CVE-2023-6595?

CVE-2023-6595 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-6595?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Whatsup Gold.