Lucene search

[email protected]CVE-2022-38107

HistoryOct 19, 2022 - 10:15 p.m.

CVE-2022-38107

2022-10-1922:15:12

CWE-209

[email protected]

web.nvd.nist.gov

cve-2022-38107

sensitive information

error message

disclosure

environmental details

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.7%

JSON

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details.

Affected configurations

NVD

Node

solarwindssql_sentryRange≤2021.18.10

CPENameOperatorVersion
solarwinds:sql_sentrysolarwinds sql sentryle2021.18.10

CPE	Name	Operator	Version
solarwinds:sql_sentry	solarwinds sql sentry	le	2021.18.10

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SQL Sentry",
    "vendor": "SolarWinds",
    "versions": [
      {
        "lessThanOrEqual": "2021.18.10 and previous versions",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

docs.sentryone.com/help/sentryone-platform-release-notes

www.solarwinds.com/trust-center/security-advisories/CVE-2022-38107

Social References

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.7%

JSON

Related for CVE-2022-38107

nvd1 cvelist1 prion1