CVE-2017-7647

SolarWinds Log & Event Manager (LEM) prior to 6.3.1 Hotfix 4 is affected by CVE-2017-7647, allowing an authenticated user to execute arbitrary commands. The issue is documented across multiple feeds (Red Hat, NVD, CNVD, Nessus plugin) with the core impact being remote command execution via an aut...

CVE-2017-7646

SolarWinds Log & Event Manager (LEM) prior to 6.3.1 Hotfix 4 allows an authenticated user to browse the server filesystem and read arbitrary files. Risk details are not expanded beyond this description in the provided documents. Remediation: upgrade to 6.3.1 Hotfix 4 or newer where indicated.

CVE-2017-7647: Undefined Security Weakness

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands...

CVE-2017-7646: Exposure of Sensitive Information to an Unauthorized Actor

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

SolarWind LEM Default SSH Password Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module exploits the default credentials of SolarWind LEM. A men...

SolarWinds LEM 6.3.1 - Remote Code Execution Exploit

Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module...

SolarWind LEM Default SSH Password Remote Code Execution Exploit

This module exploits the default credentials of SolarWind LEM. A menu system is encountered when the SSH service is accessed with the default username and password which is "cmc" and "password". By exploiting a vulnerability that exist on the menuing script, an attacker can escape from restricted...

CVE-2017-5198

SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...

Design/Logic Flaw

SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...

Design/Logic Flaw

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5198

SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...

CVE-2017-5199

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5199

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5198

SolarWinds LEM (SIEM) prior to version 6.3.1 contains a misconfigured sudo setup that lets local attackers obtain root by editing /usr/local/contego/scripts/hostname.sh. This item is confirmed by multiple sources in the connected data. Affected product/version: SolarWinds LEM before 6.3.1. Root/P...

CVE-2017-5199

CVE-2017-5199 affects SolarWinds Log and Event Manager (LEM) up to version 6.3.1. The vulnerability enables an authenticated remote attacker to execute arbitrary code by editing the file /usr/local/contego/scripts/mgrconfig.pl via the editbanner feature. The NVD entry notes a CVSS2 base score of ...

CVE-2017-5198

SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...

CVE-2017-5199: Incorrect Permission Assignment for Critical Resource

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5198: Undefined Security Weakness

SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...

PT-2017-16383

Name of the Vulnerable Software and Affected Versions SolarWinds LEM aka SIEM versions prior to 6.3.1 Description The issue is related to an incorrect sudo configuration, allowing local users to gain root access. This can be achieved by editing the /usr/local/contego/scripts/hostname.sh script...

PT-2017-16384

Name of the Vulnerable Software and Affected Versions SolarWinds LEM aka SIEM versions prior to 6.3.1 Description The issue allows remote authenticated users to execute arbitrary code. This is achieved by exploiting the editbanner feature, which enables editing of the...