CVE-2024-6671 — Vulnerability intelligence

progress — whatsup gold

Published: 2024-08-29T22:06:19.291Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

Sources

• CVE-2024-6671
• Vendor Advisory
• Product
• CVE-2024-6671