Lucene search
SolarWindsCVELIST:CVE-2022-47508HistoryFeb 15, 2023 - 12:00 a.m.
CVE-2022-47508 Disable NTLM: SAM 2022.4
2023-02-1500:00:00
CWE-287
SolarWinds
www.cve.org
2
cve-2022-47508
ntlm
kerberos
ip address
polling
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.
CNA Affected
[
{
"vendor": "SolarWinds",
"product": "Server & Application Monitor (SAM)",
"versions": [
{
"version": "2022.4.1 and prior versions",
"status": "affected",
"lessThanOrEqual": "2022.4.1",
"versionType": "custom"
}
]
}
]Related
prion
prion
Code injection
2023-02-15 19:15:00
nvd
nvd
CVE-2022-47508
2023-02-15 19:15:12
cve
cve
CVE-2022-47508
2023-02-15 19:15:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Related for CVELIST:CVE-2022-47508