Security Advisory
CVE-2022-29848
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system.