Lucene search

SolarWindsCVE-2023-23839

HistoryApr 25, 2023 - 9:15 p.m.

CVE-2023-23839

2023-04-2521:15:10

CWE-200

SolarWinds

web.nvd.nist.gov

solarwinds

platform

vulnerability

unauthorized access

sensitive information

cve-2023-23839

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users to access Orion.WebCommunityStrings SWIS schema object and obtain sensitive information.

Affected configurations

Nvd

Node

solarwindssolarwinds_platformRange<2023.2.0

VendorProductVersionCPE
solarwindssolarwinds_platform*cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
solarwinds	solarwinds_platform	*	cpe:2.3:a:solarwinds:solarwinds_platform::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SolarWinds Platform",
    "vendor": "SolarWinds",
    "versions": [
      {
        "lessThan": "2023.2",
        "status": "affected",
        "version": "2023.1 and prior versions",
        "versionType": "custom"
      }
    ]
  }
]

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2023-23839

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

Related for CVE-2023-23839