cve/2024/CVE-2024-4885.md
2024-07-25 21:25:12 +00:00

851 B

CVE-2024-4885

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

POC

Reference

No PoCs from references.

Github