Medium WID-SEC-2025-0310 1 CVE

SolarWinds Kiwi Syslog Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Feb 10, 2025 · Updated Feb 10, 2025 · de-DE

Vendor: SolarWinds Product: Kiwi Syslog Server Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in SolarWinds Kiwi Syslog Server ausnutzen, um Informationen offenzulegen.

Product

Kiwi Syslog Server ist eine Software zur Verwaltung von Ereignisprotokollen.

Vulnerabilities 1

Medium 4.6

CVE-2024-45718

Sensitive data disclosure vulnerability

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data.

SolarWinds Kiwi Syslog NG

Feb 11, 2025

Revision history

2025-02-10 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2025-02-10
https://nvd.nist.gov/vuln/detail/CVE-2024-45718
KSS NG 1.3.1 release notes vom 2025-02-10
https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kssng_1-3-1_release_notes.htm