Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-5012

WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability

Description

In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored in the product Credential Library.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WhatsUp Gold

Default version status: affected

  • 2023.1.0 to < 2023.1.3affected

References