SQL Injection Vulnerability Discovered in Progress WhatsUp Gold

What changed

A critical SQL injection vulnerability has been discovered in Progress WhatsUp Gold. This flaw allows unauthenticated attackers to exploit the application and retrieve encrypted user passwords under specific configurations.

The vulnerability arises when the application is set up with only a single user, significantly increasing the risk of credential exposure.

Who is affected

Organizations utilizing Progress WhatsUp Gold are at risk, particularly those with a single-user configuration.

This vulnerability could impact various sectors relying on network monitoring and management solutions.

• Progress WhatsUp Gold users
• IT departments managing network infrastructure
• Organizations with limited user access configurations

What to do

It is crucial for affected users to assess their configurations and consider implementing additional user accounts to mitigate this vulnerability.

Regularly updating the application and monitoring for patches from Progress can also help in reducing exposure to this risk.

• Review user configurations in WhatsUp Gold
• Implement multiple user accounts where feasible
• Stay informed on updates and patches from Progress