CVE-2024-46905

Summary

CVE-2024-46905 is a SQL Injection vulnerability affecting WhatsUp Gold versions prior to 2024.0.1. This issue grants authenticated, lower-privileged users, such as those with Network Manager permissions, the ability to escalate their privileges and gain admin access. Exploitation of this vulnerability could lead to unauthorized access and potential data breaches, making it a significant security risk for affected organizations. It is recommended that users upgrade to the latest version of WhatsUp Gold to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.