PT-2015-7108 · Ipswitch · Ipswitch Whatsup Gold

Deral Heiland · Published 2015-12-27 · Updated 2024-08-27 · CVE-2015-6005

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IPSwitch WhatsUp Gold versions prior to 16.4

Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple fields, including (1) an SNMP OID object, (2) an SNMP trap message, (3) the View Names field, (4) the Group Names field, (5) the Flow Monitor Credentials field, (6) the Flow Monitor Threshold Name field, (7) the Task Library Name field, (8) the Task Library Description field, (9) the Policy Library Name field, (10) the Policy Library Description field, (11) the Template Library Name field, (12) the Template Library Description field, (13) the System Script Library Name field, (14) the System Script Library Description field, or (15) the CLI Settings Library Description field.

Recommendations For IPSwitch WhatsUp Gold versions prior to 16.4, update to version 16.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the mentioned fields to minimize the risk of exploitation. Avoid using the mentioned fields in the affected versions until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-6005

Affected Products

Ipswitch Whatsup Gold

References · 8

• 🔥 https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6005 · Security Note
• http://twitter.com/ipswitch/statuses/677558623229317121 · Vendor Advisory
• https://kb.cert.org/vuls/id/176160 · Note
• http://securityfocus.com/bid/79506 · Note
• http://securitytracker.com/id/1034833 · Note
• https://t.me/cvenotify/92359 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6005 · Note