{"vulnerability": "CVE-2022-29846", "sightings": [{"uuid": "6c02b39e-95d9-445f-beed-e964a3099a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "26b68d61-b1d7-497b-a1fd-3ee70a373157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:45.000000Z"}, {"uuid": "084837b6-0ce2-418b-ad0e-f3340f7d5d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb", "content": "", "creation_timestamp": "2023-03-17T21:59:16.000000Z"}, {"uuid": "2f02c2ba-ac96-4f7d-b85c-7e80461d4991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "3ef71094-2e30-4657-b537-e5fb1c09d29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "https://t.me/cibsecurity/42441", "content": "\u203c CVE-2022-29846 \u203c\n\nIn Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T22:40:48.000000Z"}, {"uuid": "9279e4f5-943a-45d3-9fe7-73173e3d4893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29846", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb", "content": "{\"actions\": [{\"description\": \"Decrypt WhatsUp Gold database export CSV file\", \"name\": \"Decrypt\"}, {\"description\": \"Export WhatsUp Gold database and perform decryption\", \"name\": \"Dump\"}, {\"description\": \"Export WhatsUp Gold database without decryption\", \"name\": \"Export\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"sshah \", \"npm \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exports and decrypts credentials from WhatsUp Gold to a CSV file;\\n          it is intended as a post-exploitation module for Windows hosts with WhatsUp\\n          Gold installed. The module has been tested on and can successfully decrypt\\n          credentials from WhatsUp versions 11.0 to the latest (22.x). Extracted\\n          credentials are automatically added to loot.\", \"disclosure_date\": \"2022-11-22\", \"fullname\": \"post/windows/gather/credentials/whatsupgold_credential_dump\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"WhatsUp Gold Credentials Dump\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/gather/credentials/whatsupgold_credential_dump\", \"references\": [\"CVE-2022-29845\", \"CVE-2022-29846\", \"CVE-2022-29847\", \"CVE-2022-29848\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29845\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29846\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29847\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29848\", \"URL-https://blog.assetnote.io/2022/06/09/whatsup-gold-exploit/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:42.208028Z"}]}