CRITICAL: CVE-2024-6670, CVE-2024-6671 - Multiple SQL Injection vulnerabilities in Progress' WhatsUp Gold.
Remember, there was an exploited vulnerability with CVE-2024-4885 for the same product recently.
Advisory:
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
#patchnow
#Progress
#WhatsUp
#vulnerability
#computersecurity
#hacking
#cyberattack
#infosec
#informationsecurity
#cybersecurityawareness
#databreach
#cybersecurity
Update :
CISA has added CVE-2024-6670 to its 'Known Exploited vulnerabilities catalog'. IF YOU HAVEN'T PATCHED IT YET, PATCH IT NOW!!
Link: https://cisa.gov/known-exploited-vulnerabilities-catalog
Info.: Progress has added another CRITICAL Authentication Bypass vulnerability in WhatsUp Gold with CVE-2024-7763 to its August, 16 security notification which included CVE-2024-6670.
Blog: https://patchnow24x7.com/blog-1/f/info-progress-has-added-cve-2024-7763-to-its-aug16-notification
Patch NOW !!