WhatsUp Gold published a security advisory for multiple vulnerabilities. Two of the vulnerabilities are critical and one is medium. Successful exploitation of the vulnerabilities give an attacker full access to the WhatsUp Gold server and allow him to view sensitive information and change configurations in LDAP, which can further impact an enterprise environment. The impact on confidentiality and integrity of the systems is severe and the vulnerabilities can be exploited remotely without prior authentication.

 

Given the severe impact of these vulnerabilities, the low complexity required to exploit them successfully and the fact that WhatsUp Gold has been targeted by threat actors in the past, it is important to patch these vulnerabilities as soon as possible.

 

The Centre for Cybersecurity Belgium strongly recommends installing updates for vulnerable devices with the highest priority, after thorough testing.

 

 

The CCB recommends organizations upscale monitoring and detection capabilities to identify any related suspicious activity, ensuring a swift response in case of an intrusion.

In case of an intrusion, you can report an incident via: https://ccb.belgium.be/nl/cert/een-incident-melden.

While patching appliances or software to the newest version may provide safety from future exploitation, it does not remediate historic compromise.