CVE-2023-23843

Опубликовано: 26 июл. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

Ссылки

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23843
Vendor Advisory
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23843
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*

Версия до 2023.3.0 (исключая)

EPSS

Процентиль: 30%

0.00107

Низкий

7.2 High

CVSS3

Дефекты

CWE-697

Связанные уязвимости

GHSA-8mvj-4pw5-jx34

CVSS3: 6.8

github

больше 2 лет назад