Vulnerabilities > CVE-2023-6368 - Unspecified vulnerability in Progress Whatsup Gold

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

progress

NVD

Published: 2023-12-14

Updated: 2024-11-21

Summary

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Whatsup Gold - Progress Whatsup Gold 7.0 Progress Whatsup Gold 7.03 Progress Whatsup Gold 7.04 Progress Whatsup Gold 8.0 Progress Whatsup Gold 8.01 Progress Whatsup Gold 8.03 Progress Whatsup Gold 11 Progress Whatsup Gold 15.02 Progress Whatsup Gold 16.3 Progress Whatsup Gold 16.4 Progress Whatsup Gold 17.1.1 Progress Whatsup Gold 18.0 Progress Whatsup Gold 21.1.0 Progress Whatsup Gold 21.1.1 Progress Whatsup Gold 21.1.2 Progress Whatsup Gold 22.0.0 Progress Whatsup Gold 22.0.1 Progress Whatsup Gold 22.0.2 Progress Whatsup Gold 22.1.0 Progress Whatsup Gold 23.0.0 Progress Whatsup Gold 23.0.1 Progress Whatsup Gold 23.0.2	24

Summary

Vulnerable Configurations

References