Unrated severityNVD Advisory· Published Dec 14, 2023· Updated Oct 16, 2024

WhatsUp Gold Unauthenticated Access to an API Endpoint

CVE-2023-6368

Description

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Whatsup Goldllm-fuzzy
Range: <2023.1
Progress Software Corporation/WhatsUp Goldv5
Range: 2023.0

Patches

Vulnerability mechanics

References

community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023mitrevendor-advisory
www.progress.com/network-monitoringmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000