PT-2025-6168 · Solarwinds · Solarwinds Platform

Ravi Khanchani + 1 · Published 2025-02-11 · Updated 2025-02-12 · CVE-2024-52611

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions 2024.4.1 and previous versions

Description: The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. Although the disclosed data does not contain sensitive information, it could potentially assist an attacker in other malicious actions.

Recommendations: For versions 2024.4.1 and previous versions, update to a version newer than 2024.4.1 to resolve the issue. As a temporary workaround, consider restricting access to error messages that could disclose potentially useful information to attackers.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2024-52611

Affected Products

Solarwinds Platform

References · 8

• https://osv.dev/vulnerability/CVE-2024-52611 · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/CVE-2024-52611 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52611 · Security Note
• https://twitter.com/CVEnew/status/1889217187908354530 · Twitter Post
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm · Note
• https://t.me/cvedetector/17678 · Telegram Post
• https://twitter.com/cybercronai/status/1889519880715567298 · Twitter Post
• https://t.me/cvenotify/110767 · Telegram Post