Lucene search
HistoryFeb 15, 2023 - 7:15 p.m.
CVE-2022-47508
cve-2022-47508
customers
polling
kerberos
ntlm
ip address
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.
Affected configurations
Node
solarwindsserver_and_application_monitorMatch2022.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| solarwinds | server_and_application_monitor | 2022.4 | cpe:2.3:a:solarwinds:server_and_application_monitor:2022.4:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2023-02-15 19:15:00
cve
cve
CVE-2022-47508
2023-02-15 19:15:12
cvelist
cvelist
CVE-2022-47508 Disable NTLM: SAM 2022.4
2023-02-15 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Related for NVD:CVE-2022-47508