Description
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| whatsupgold | progress / whatsupgold | >= 2023.1.0, < 2024.0.0 | affected |
| WhatsUp Gold | Progress Software Corporation / WhatsUp Gold | >= 2023.1.0, < 2024.0.0 | affected |