Remote code execution

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-33228 SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-33228 SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information...

CVE-2023-33228

CVE-2023-33228 affects SolarWinds Network Configuration Manager. The issue permits users with administrative access to the SolarWinds Web Console to disclose sensitive information. According to NVD, AV Network, PR High, UI N, S U, C High, I/N, A None with a 3.1 base score of 4.9 (Medium). Related...

CVE-2023-40062 Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-40062 Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges...

CVE-2023-40062

CVE-2023-40062 affects SolarWinds Platform (Orion Platform). The issue is an incomplete list of disallowed inputs in the BlacklistedFilesChecker, enabling a low-privileged user to execute commands with SYSTEM privileges. Public references indicate affected versions are prior to 2023.4, and mitiga...

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

SolarWinds Network Configuration Manager Path Traversal Vulnerability

SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A path traversal vulnerability exists in SolarWinds Network Configuration Manager that stems from vulnerability to a directory traversal remote code execution vulnerability that allows a low-level user to...

SolarWinds Network Configuration Manager Security Vulnerability

SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A security vulnerability exists in SolarWinds Network Configuration Manager that stems from susceptibility to a sensitive information disclosure vulnerability that allows users with administrative access to...

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of an insecure job execution mechanism vulnerability that could lead to...

SolarWinds Network Configuration Manager Path Traversal Vulnerability

SolarWinds Network Configuration Manager is an easy-to-use solution from SolarWinds USA. A path traversal vulnerability exists in SolarWinds Network Configuration Manager. An attacker could exploit this vulnerability to cause remote code execution...

PT-2023-7405 · Solarwinds · Solarwinds Orion Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue is related to an incomplete list of disallowed inputs in the BlacklistedFilesChecker class of the SolarWinds Orion Platform, which can lead to remote code...

PT-2023-24233 · Solarwinds · Solarwinds Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Configuration Manager affected versions not specified Description: The issue allows users with administrative access to the SolarWinds Web Console to obtain sensitive information. Recommendations: At the moment, there is no...

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of a remote code execution vulnerability that allows a low-privileged use...

The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions, which allows a violator to increase their privileges.

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the application software interface of the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the application software interface of the SolarWinds Access Rights Manager lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the TCP port 443 remotely...

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions, which allows a violator to increase their privileges.

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the ExecuteAction function in the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the ExecuteAction function in the SolarWinds Access Rights Manager software lies in the possibility of unreliable data being restored to memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...