{"uuid": "9dcf38ed-3a18-4af3-beaf-d865b28f311e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29847", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb", "content": "{\"actions\": [{\"description\": \"Decrypt WhatsUp Gold database export CSV file\", \"name\": \"Decrypt\"}, {\"description\": \"Export WhatsUp Gold database and perform decryption\", \"name\": \"Dump\"}, {\"description\": \"Export WhatsUp Gold database without decryption\", \"name\": \"Export\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"sshah \", \"npm \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exports and decrypts credentials from WhatsUp Gold to a CSV file;\\n          it is intended as a post-exploitation module for Windows hosts with WhatsUp\\n          Gold installed. The module has been tested on and can successfully decrypt\\n          credentials from WhatsUp versions 11.0 to the latest (22.x). Extracted\\n          credentials are automatically added to loot.\", \"disclosure_date\": \"2022-11-22\", \"fullname\": \"post/windows/gather/credentials/whatsupgold_credential_dump\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"WhatsUp Gold Credentials Dump\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/gather/credentials/whatsupgold_credential_dump\", \"references\": [\"CVE-2022-29845\", \"CVE-2022-29846\", \"CVE-2022-29847\", \"CVE-2022-29848\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29845\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29846\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29847\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29848\", \"URL-https://blog.assetnote.io/2022/06/09/whatsup-gold-exploit/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:42.312151Z"}