CVE-2017-5198

SolarWinds LEM (SIEM) prior to version 6.3.1 contains a misconfigured sudo setup that lets local attackers obtain root by editing /usr/local/contego/scripts/hostname.sh. This item is confirmed by multiple sources in the connected data. Affected product/version: SolarWinds LEM before 6.3.1. Root/P...

CVE-2015-7839

CVE-2015-7839 affects SolarWinds Log and Event Manager (LEM). The vulnerability allows an unauthenticated, remote attacker to execute arbitrary commands on managed hosts via a request to the nonsecurestreamingamf endpoint under services/messagebroker, leveraging the traceroute functionality. Mult...