PT-2022-19872 · Ipswitch · Ipswitch Whatsup Gold

Published 2022-05-11 · Updated 2024-08-27 · CVE-2022-29846

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ipswitch WhatsUp Gold versions 16.1 through 21.1.1 Ipswitch WhatsUp Gold version 22.0.0

Description The issue allows an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.

Recommendations For Ipswitch WhatsUp Gold versions 16.1 through 21.1.1, update to a version that fixes this issue. For Ipswitch WhatsUp Gold version 22.0.0, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-29846

Affected Products

Ipswitch Whatsup Gold

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb · Exploit
• https://osv.dev/vulnerability/CVE-2022-29846 · Vendor Advisory
• https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29846 · Security Note
• https://t.me/cibsecurity/42441 · Telegram Post
• https://progress.com/network-monitoring · Note
• https://t.me/cvenotify/92367 · Telegram Post