PT-2023-2811 · Solarwinds · Solarwinds Platform+1

·

CVE-2022-36963

·

Publicado

2023-04-21

·

Atualizado

2023-08-03

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions SolarWinds Platform (affected versions not specified)
Description The issue is related to the SolarWinds Platform, which was susceptible to a Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands. The vulnerability is associated with incorrect code generation management in the SolarWinds Orion Platform.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-02736
CVE-2022-36963
ZDI-23-457

Produtos afetados

Solarwinds Orion Platform
Solarwinds Platform