CVE-2024-4885

Progress WhatsUp Gold Path Traversal Vulnerability

Whatsup Gold

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

25. Jun 2024

Ausgewertete Quellen

• Hersteller
  https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4885
• CISA
  Progress WhatsUp Gold Path Traversal Vulnerability
• NVD
  CVE-2024-4885