- Vendor / Project
- Progress
- Product
- WhatsUp Gold
- Date added
- Sep 16, 2024
- Due date
- Oct 7, 2024
- Known ransomware use
- Known
- CWEs
- CWE-89
Description
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.