CVE-2022-29845

Published: May 11, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.

Affected (3)

Products: Progress: Whatsup Gold

Progress

1 product

Whatsup Gold

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Progress Whatsup Gold	Version 21.1.0
Progress Whatsup Gold	Version 21.1.1
Progress Whatsup Gold	Version 22.0.0

Related CWEs

CWE-829

Inclusion of Functionality from Untrusted Control Sphere

The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (4)

https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022

Source: cve@mitre.org

Vendor Advisory

https://www.progress.com/network-monitoring

Source: cve@mitre.org

Product

https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.progress.com/network-monitoring

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.