The vulnerability of the restrictssh function in the SolarWinds Log & Event Manager software allows a malicious actor to execute commands with root privileges.

The vulnerability of the restrictssh function in the SolarWinds Log & Event Manager software management tool is related to the lack of measures taken to protect data at the administrative level. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain higher...

CVE-2017-7722

In SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" the default username and password. By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the...

CVE-2017-7722

CVE-2017-7722 affects SolarWinds Log & Event Manager (LEM) versions before 6.3.1 Hotfix 4. The vulnerability resides in the restrictssh portion of the menuing script used when SSH is accessed with the default credentials (username: cmc, password). Exploitation can escape the restricted shell via ...