Lucene search

SolarWindsCVE-2022-47508

HistoryFeb 15, 2023 - 7:15 p.m.

CVE-2022-47508

2023-02-1519:15:12

CWE-287

SolarWinds

web.nvd.nist.gov

cve-2022-47508

kerberos

ntlm

polling

environment

ip address

data query

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.0%

JSON

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.

Affected configurations

Nvd

Node

solarwindsserver_and_application_monitorMatch2022.4

VendorProductVersionCPE
solarwindsserver_and_application_monitor2022.4cpe:2.3:a:solarwinds:server_and_application_monitor:2022.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
solarwinds	server_and_application_monitor	2022.4	cpe:2.3:a:solarwinds:server_and_application_monitor:2022.4:::::::*

CNA Affected

[
  {
    "vendor": "SolarWinds",
    "product": "Server & Application Monitor (SAM)",
    "versions": [
      {
        "version": "2022.4.1 and prior versions",
        "status": "affected",
        "lessThanOrEqual": "2022.4.1",
        "versionType": "custom"
      }
    ]
  }
]

References

documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.0%

JSON

Related for CVE-2022-47508