BDU%3A2024-05166 — Vulnetix

BDU%3A2024-05166 PUBLISHED CVSS 7.099999904632568 HIGH

Уязвимость веб-консоли программного обеспечения сетевого мониторинга и управления ИТ-инфраструктурой SolarWinds Platform, позволяющая нарушителю проводить межсайтовые сценарные атаки

Risk Scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L

Affected Products

Vendor	Product	Versions
solarwinds	solarwinds_platform	0
SolarWinds	SolarWinds Platform	2024.1.1 and previous versions
SolarWinds Inc.	SolarWinds Platform

Exploit Intelligence

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm (circl)
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-29004 (circl)
https://vuldb.com/?id.267082 (circl)

Timeline

Jun 4, 2024 CVE Published
Jul 10, 2024 CVE Updated

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm url
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-29004 url
https://vuldb.com/?id.267082 url

Open in Interactive Console →