CVE-2024-4885
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
In short
WhatsUp Gold allows attackers to exploit a flaw in the file export feature that lets them run harmful commands on the server without needing to log in. This is critical because it gives attackers complete control of the affected system.
Technical detail
The GetFileWithoutZip method in WhatsUp.ExportUtilities.Export is vulnerable to directory traversal (CWE-22), permitting unauthenticated remote code execution with iisapppool\nmconsole privileges. The vulnerability exploits insufficient path validation in file handling operations, allowing arbitrary command execution on the server.
Summary generated and translated by AI from the official description.
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The
WhatsUp.ExportUtilities.Export.GetFileWithoutZip
allows execution of commands with iisapppool\nmconsole privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Progress Software Corporation · WhatsUp Goldpublic PoCs found — 1
githubgithub.com/sinsinology/CVE-2024-4885★ 17⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →