PT-2023-24233 · Solarwinds · Solarwinds Network Configuration Manager

Arnaud Cordier · Publicado 2023-11-01 · Atualizado 2023-11-09 · CVE-2023-33228

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SolarWinds Network Configuration Manager (affected versions not specified)

Description The issue allows users with administrative access to the SolarWinds Web Console to obtain sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2023-33228

Produtos afetados

Solarwinds Network Configuration Manager

Referências · 6

• https://t.me/cibsecurity/73350 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-33228 · Aviso do Fabricante
• https://solarwinds.com/trust-center/security-advisories/CVE-2023-33228 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1719744490720641137 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-33228 · Nota de Segurança
• https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm · Nota