Description
In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Database Performance Analyzer (DPA) | SolarWinds – ≤ 2022.4 | — |
High · 7.5
CVE-2022-38112
EUVD-2022-40714GHSA-hm3f-fwmw-7g2j
Sensitive Information Disclosure Vulnerability
Published Jan 20, 2023 · Updated Apr 3, 2025 · Assigned by SolarWinds