The SolarWinds Platform was susceptible to the Incorrect... · CVE-2023-23845 · GitHub Advisory Database · GitHub

The SolarWinds Platform was susceptible to the Incorrect...

High severity Unreviewed Published Sep 14, 2023 to the GitHub Advisory Database • Updated Jan 6, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

References

Published by the National Vulnerability Database

Sep 13, 2023

Published to the GitHub Advisory Database Sep 14, 2023

Last updated Jan 6, 2024

Weaknesses

CWE-697

Incorrect Comparison

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses. Learn more on MITRE.

CWE-749

Exposed Dangerous Method or Function

The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted. Learn more on MITRE.