Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)

Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)
Ipswitch WhatsUp Gold SQL injection vulnerability in CVE-2015-8261)

Release date:
Updated on:

Affected Systems:

Ipswitch WhatsUp Gold <16.4

Description:

CVE (CAN) ID: CVE-2015-8261

WhatsUp Gold provides a complete and easy-to-use monitoring mechanism to comprehensively monitor application services and network devices, and helps IT administrators transform Network Management Information into readable business information.

In versions earlier than Ipswitch WhatsUp Gold 16.4, DroneDeleteOldMeasurements does not properly verify the serialization of XML objects. This allows remote attackers to execute SQL injection attacks by constructing SOAP requests.

<* Source: Matt Buzanowski

Link: https://www.kb.cert.org/vuls/id/753264
*>

Suggestion:

Vendor patch:

Ipswitch
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ipswitch.com/

This article permanently updates the link address: