Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability

The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...

CVE-2017-7722

In SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" the default username and password. By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the...

CVE-2017-7722: Improper Neutralization of Special Elements used in a Command

In SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" the default username and password. By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the...

CVE-2017-7646

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

CVE-2017-7646

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

PT-2017-17861

Name of the Vulnerable Software and Affected Versions SolarWinds Log & Event Manager LEM versions prior to 6.3.1 Hotfix 4 Description The issue allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within. Recommendations For versions...

CVE-2017-7647: Undefined Security Weakness

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands...

CVE-2017-7646: Exposure of Sensitive Information to an Unauthorized Actor

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within...

PT-2017-17862

Name of the Vulnerable Software and Affected Versions SolarWinds Log & Event Manager LEM versions prior to 6.3.1 Hotfix 4 Description The issue allows an authenticated user to execute arbitrary commands. Recommendations For versions prior to 6.3.1 Hotfix 4, update to version 6.3.1 Hotfix 4 or lat...

PT-2017-3092

Name of the Vulnerable Software and Affected Versions SolarWinds Log & Event Manager LEM versions prior to 6.3.1 Hotfix 4 Description The issue is related to the restrictssh feature in the menuing script of SolarWinds Log & Event Manager LEM. An attacker can exploit this to escape from the...

CVE-2015-7839

SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...