CVE-2018-8939 | BDVDB-2026-100273 Detail

Description#

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm

Exploit#

No public exploit known

History#

Version 12018-05-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.