{"vulnerability": "cve-2022-29848", "sightings": [{"uuid": "49bef2c6-3f19-41c1-9506-4e8338345656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "e7f9cf94-8e7c-425e-87c6-e12b125b217f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:45.000000Z"}, {"uuid": "9007adfd-2e92-46d0-8bf3-bb6c8f50972d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "d03a7d82-671c-483d-9db4-0dd0e702ceb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb", "content": "", "creation_timestamp": "2023-03-17T21:59:16.000000Z"}, {"uuid": "184c4db8-e6c6-42fd-981e-e5ba734b8383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "https://t.me/cibsecurity/42429", "content": "\u203c CVE-2022-29848 \u203c\n\nIn Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T22:40:35.000000Z"}, {"uuid": "0931025b-0e70-4874-91ce-ff3468571026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29848", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb", "content": "{\"actions\": [{\"description\": \"Decrypt WhatsUp Gold database export CSV file\", \"name\": \"Decrypt\"}, {\"description\": \"Export WhatsUp Gold database and perform decryption\", \"name\": \"Dump\"}, {\"description\": \"Export WhatsUp Gold database without decryption\", \"name\": \"Export\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"sshah \", \"npm \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exports and decrypts credentials from WhatsUp Gold to a CSV file;\\n          it is intended as a post-exploitation module for Windows hosts with WhatsUp\\n          Gold installed. The module has been tested on and can successfully decrypt\\n          credentials from WhatsUp versions 11.0 to the latest (22.x). Extracted\\n          credentials are automatically added to loot.\", \"disclosure_date\": \"2022-11-22\", \"fullname\": \"post/windows/gather/credentials/whatsupgold_credential_dump\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"WhatsUp Gold Credentials Dump\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/gather/credentials/whatsupgold_credential_dump\", \"references\": [\"CVE-2022-29845\", \"CVE-2022-29846\", \"CVE-2022-29847\", \"CVE-2022-29848\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29845\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29846\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29847\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29848\", \"URL-https://blog.assetnote.io/2022/06/09/whatsup-gold-exploit/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:42.396337Z"}]}