Skip to content
OpenAdvisories
High · 7.2 CVE-2023-23844 EUVD-2023-27930GHSA-rrcv-rxhj-pjh8

SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability

Published Jul 26, 2023 · Updated Oct 23, 2024 · Assigned by SolarWinds

Description

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Platform < 2023.3 2023.3

Advisories 1

References