CVE-2023-6368 (published 2023-12-14T16:06:29.101Z)

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.


Affected products: Vendor: Progress Software Corporation
Product: WhatsUp Gold
Versions: 2023.0, 2022.0