CVE-2024-7763 - WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability

Back Back to CVE browser

CRITICAL

WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability

Published Oct 24, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.61%

Description

In WhatsUp Gold versions released before 2024.0.0,

an Authentication Bypass issue exists which allows an attacker to obtain encrypted user credentials.

Affected products

Vendor Progress Software Corporation Product WhatsUp Gold Default
affected
- Version
  2023.1.0
  Status
  affected
  Constraints
  <2024.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Progress Software Corporation

WhatsUp Gold

affected

Version	Status	Constraints
2023.1.0	affected	<2024.0.0

Vendor Progress Product Whatsup Gold Default
n/a
- Version
  2023.1.0
  Status
  affected
  Constraints
  <2024.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Progress

Whatsup Gold

n/a

Version	Status	Constraints
2023.1.0	affected	<2024.0.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48634
Advisory
https://www.progress.com/network-monitoring
product

Link	Providers	Tags
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024		vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48634		Advisory
https://www.progress.com/network-monitoring		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ProgressSoftware

Published Oct 24, 2024

Updated Oct 29, 2024

Reserved Aug 13, 2024

Link CVE-2024-7763

CISA Vulnrichment

Updated Oct 25, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-7763

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-7763

ENISA EUVD

Assigner ProgressSoftware

Published Oct 24, 2024

Updated Oct 29, 2024

Exploited since n/a

Link EUVD-2024-48634

EUVD-2024-48634