Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)

Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)

Affected Systems:
Ipswitch WhatsUp Gold <16.4
Description:
CVE (CAN) ID: CVE-2015-8261
WhatsUp Gold provides a complete and easy-to-use monitoring mechanism to comprehensively monitor application services and network devices, and helps IT administrators transform Network Management Information into readable business information.
In versions earlier than Ipswitch WhatsUp Gold 16.4, DroneDeleteOldMeasurements does not properly verify the serialization of XML objects. This allows remote attackers to execute SQL injection attacks by constructing SOAP requests.
 
Link: https://www.kb.cert.org/vuls/id/753264
*>
Suggestion:
Vendor patch:
Ipswitch
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://www.ipswitch.com/