PT-2017-16384 · Solarwinds · Solarwinds Sem
CVE-2017-5199
·
Publicado
2017-03-24
·
Atualizado
2019-10-03
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SolarWinds LEM (aka SIEM) versions prior to 6.3.1
Description
The issue allows remote authenticated users to execute arbitrary code. This is achieved by exploiting the editbanner feature, which enables editing of the /usr/local/contego/scripts/mgrconfig.pl script.
Recommendations
For versions prior to 6.3.1, update to a version that contains a fix for this issue to prevent arbitrary code execution. As a temporary workaround, consider restricting access to the editbanner feature until a patch is available.
Correção
Incorrect Permission
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solarwinds Sem