VDB
BDU%3A2024-05115
BDU%3A2024-05115
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость страницы входа веб-консоли (/Orion/Login.aspx) программного обеспечения сетевого мониторинга и управления ИТ-инфраструктурой SolarWinds Platform, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force)
Risk Scores
CVSS 3.1
6.400000095367432
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds Inc. | SolarWinds Platform | |
| solarwinds | solarwinds_platform | 0 |
| SolarWinds | SolarWinds Platform | 2024.1.1 and previous versions |
Timeline
- Jun 4, 2024 CVE Published
- Jun 22, 2024 PoC Published
- Jun 22, 2024 PoC Published
- Jul 8, 2024 CVE Updated
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm url
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28999 url
- https://vuldb.com/ru/?id.267087 url
- https://github.com/HussainFathy/CVE-2024-28999 url
- https://medium.com/@0xSphinx/cve-2024-28999-solarwinds-race-condition-62e175339b46 url