PT-2022-19871 · Ipswitch · Ipswitch Whatsup Gold
CVE-2022-29845
·
Published
2022-05-11
·
Updated
2024-08-27
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Ipswitch WhatsUp Gold versions 21.1.0 through 21.1.1
Ipswitch WhatsUp Gold version 22.0.0
Description
The issue allows an authenticated user to invoke an API transaction to read the contents of a local file.
Recommendations
For Ipswitch WhatsUp Gold versions 21.1.0 through 21.1.1, update to a version that fixes this issue.
For Ipswitch WhatsUp Gold version 22.0.0, update to a version that fixes this issue.
As a temporary workaround, consider restricting access to API transactions that allow reading local file contents until a patch is available.
Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ipswitch Whatsup Gold