Skip to content
OpenAdvisories
Medium WID-SEC-2023-2324 2 CVEs

SolarWinds Platform: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Sep 12, 2023 · Updated Sep 12, 2023 · de-DE

Vendor: SolarWinds Product: Platform < 2023.3.1 Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um seine Privilegien zu erhöhen.

Product

SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.

Vulnerabilities 2

  • Medium 6.8
    CVE-2023-23840

    SolarWinds Platform Exposed Dangerous Method Vulnerability

    The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

    SolarWinds SolarWinds Platform
  • Medium 6.8
    CVE-2023-23845

    SolarWinds Platform Exposed Dangerous Method Vulnerability

    The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

    SolarWinds SolarWinds Platform

Revision history

  1. #1

    Initiale Fassung

References