3105 matches found
CVE-2022-47503
CVE-2022-47503 involves deserialization of untrusted data in SolarWinds Platform. Connected advisories identify a concrete instance in SolarWinds Network Performance Monitor where the WorkerControllerWCFProxy handles deserialized input; authenticated attackers can trigger remote code execution wi...
SolarWinds and Market Incentives
In early 2021, IEEE Security and Privacy asked a number of board members for brief perspectives on the SolarWinds incident while it was still breaking news. This was my response. The penetration of government and corporate networks worldwide is the result of inadequate cyberdefenses across the...
How to protect your business from supply chain attacks
Threat actors know that attacking the supply chain is not just a smart strategy but also a winning one. When American store Target found a Trojan designed to steal card details on its POS point-of-sale systems in 2013, no one expected that the route into its secure environment was its heating,...
Database Performance Analyzer 跨站脚本漏洞
SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A cross-site scripting vulnerability exists in Database Performance Analyzer DPA version...
Database Performance Analyzer 安全漏洞
SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A security vulnerability exists in Database Performance Analyzer DPA version 2022.4 and...
SolarWinds Serv-U < 15.3.0 Common Key (CVE-2021-35252)
The version of SolarWinds Serv-U installed on the remote host is prior to 15.3.0. It is, therefore, affected by a vulnerability as referenced in the serv-u1532 advisory. - Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted val...
Metasploit Weekly Wrap-Up
Back from a quiet holiday season Thankfully, it was a relatively quiet holiday break for security this year, so we hope everyone had a relaxing time while they could. This wrapup covers the last three Metasploit releases, and contains three new modules, two updates, and five bug fixes. Make sure...
SolarWinds Web Help Desk <= 12.7.6 Arbitrary Code Execution
The version of SolarWinds Web Help Desk installed on the remote host is prior to or equal to 12.7.6. It is, therefore, affected by an arbitrary code execution vulnerability. Through hard coded credentials, an attacker with local access to the Web Help Desk host machine allows to execute arbitrary...
SolarWinds Platform 2022.4.1
The version of SolarWinds Platform installed on the remote host is prior to 2022.4.1. It is, therefore, affected by a vulnerability as referenced in the hybridcloudobservabilitysolarwindsplatform202241 advisory. - Sensitive information was stored in plain text in a file that is accessible by a us...
CVE-2022-47512 Sensitive Data Disclosure Vulnerability
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
CVE-2022-47512
CVE-2022-47512 affects SolarWinds Hybrid Cloud Observability / SolarWinds Platform 2022.4 (prior to 2022.4.1). The issue is that sensitive information was stored in plain text in a file accessible to a local-accoung user, leading to potential confidentiality impact (CVE-2022-47512). The CVSS cont...
CVE-2022-47512
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
CVE-2022-47512
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
Authentication flaw
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
PT-2022-28066 · Solarwinds · Hybrid Cloud Observability +1
Name of the Vulnerable Software and Affected Versions: Hybrid Cloud Observability HCO/ SolarWinds Platform version 2022.4 Description: Sensitive information was stored in plain text in a file that is accessible by a user with a local account. Recommendations: For Hybrid Cloud Observability HCO/...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform version 2022.4 that stems from sensitive information being stored in plain text in a file that can be accessed by a...
SolarWinds Serv-U FTP Server 授权问题漏洞
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. SolarWinds Serv-U FTP Server suffers from an authorization issue vulnerability that stems from the deployment of a common encryption key across all of its instances resulting in an...
SolarWinds Serv-U File Server 跨站脚本漏洞
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U File Server versions 15.3.0 through 15.3.1 that originates from affecting the directory creation feature...