CVE-2023-33224

Опубликовано: 26 июл. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Ссылки

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
Vendor Advisory
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*

Версия до 2023.3.0 (исключая)

EPSS

Процентиль: 32%

0.00126

Низкий

7.2 High

CVSS3

Дефекты

CWE-696

NVD-CWE-Other

Связанные уязвимости

GHSA-xq6x-xxj4-mwgq

CVSS3: 6.8

github

больше 2 лет назад

BDU:2023-04684