Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability
Vulnerability Description
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored in the product Credential Library.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
认证机制不恰当
Vulnerability Title
Progress Software WhatsUp Gold 安全漏洞
Vulnerability Description
Progress Software WhatsUp Gold是美国Progress Software公司的一款网络监控软件。用于监控整个网络基础设施以及应用程序、配置和网络流量。 Progress Software WhatsUp Gold 2023.1.3版本存在安全漏洞,该漏洞源于 WUGDataAccess.Credentials 缺少身份验证,允许未经身份验证的攻击者泄露存储在产品凭据库中的 Windows 凭据。
CVSS Information
N/A
Vulnerability Type
N/A