WEB Progress WhatsUp Gold GetSqlWhereClause SQL Injection -1 (CVE-2024-46906)

Rule ID

1236405

Severity

High

Description

This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability.

Impact

SQL injection

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A