CVE-2023-6368

MEDIUM 5.3CVE-2023-6368 · Published 14/12/2023 · updated 17/06/2026

In short

CVE-2023-6368 is a MEDIUM (CVSS 5.3) vulnerability affecting whatsup gold (progress).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.3% of all vulnerabilities.
Fix: update to 23.1.0 or later.

Package	Affected versions	Patched versions
whatsup gold progress	`< 23.1.0`	`23.1.0`

Description

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate information related to a registered device being monitored by WhatsUp Gold.

References

community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023 · Vendor Advisory
progress.com/network-monitoring · Product

More vulnerabilities in whatsup gold

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

whatsup gold

progress

< 23.1.0

23.1.0

More vulnerabilities in whatsup gold

See all →