Horizon Alert
Summary of the vulnerability and why it matters
A SQL Injection vulnerability exists in WhatsUp Gold, a network monitoring tool. If the application has only one user account, an attacker could potentially access encrypted user passwords without authentication. The primary concern is to determine if this technology is in use and assess any exposure.
- Unauthenticated attackers can steal encrypted passwords.
- Affects a critical network monitoring system.
- Confirm relevance and potential exposure.
Attack Path
How an attacker could exploit the issue
This vulnerability allows an unauthenticated attacker to access sensitive information by exploiting a SQL injection flaw in WhatsUp Gold when it's set up with just one user account. The attacker can leverage this by sending specially crafted input to the application, which can then lead to the retrieval of encrypted user passwords.
- No authentication required.
- SQL injection in single-user mode.
- Allows retrieval of encrypted passwords.
Live Threat
Current exploitation, exposure, and threat context
A SQL Injection vulnerability in WhatsUp Gold, when configured with a single user, could allow an unauthenticated attacker to access encrypted user passwords. This exposure is possible when the application is accessible over the network.
- User password hashes are at risk.
- Unauthenticated network access can trigger it.
- Unauthorized access to user credentials may occur.
Operational Fix
Recommended remediation, mitigation, and detection steps
The technical owners of Progress WhatsUp Gold deployments should first identify all instances of the application. Confirm whether these instances are internet-facing or accessible from untrusted internal networks, and ascertain their business criticality. Once these factors are understood, the accountable owner can be identified to plan a risk-based remediation strategy, which may involve vendor coordination or temporary mitigations if immediate patching is not feasible.
- Track all WhatsUp Gold instances.
- Verify network exposure and criticality.
- Plan remediation with accountable owner.
