PT-2023-2270 · Solarwinds · Solarwinds Server/Application Monitor

Published 2023-02-15 · Updated 2023-02-24 · CVE-2022-47508

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Solarwinds Server & Application Monitor (affected versions not specified)

Description The issue is related to weaknesses in the authentication procedure, allowing a remote attacker to bypass authentication and access confidential information using specially crafted NTLM protocol messages. Customers who configured polling via Kerberos did not expect NTLM traffic, but querying data via IP address prevented the use of Kerberos.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-02031

CVE-2022-47508

Affected Products

Solarwinds Server/Application Monitor

References · 8

• https://osv.dev/vulnerability/CVE-2022-47508 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02031 · Security Note
• https://solarwinds.com/trust-center/security-advisories/CVE-2022-47508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47508 · Security Note
• https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm · Note
• https://t.me/cvenotify/44396 · Telegram Post
• https://t.me/cibsecurity/58271 · Telegram Post
• https://t.me/cvenotify/44952 · Telegram Post