Sensitive Information Disclosure Vulnerability

CVE-2022-38112

What is CVE-2022-38112?

In versions of SolarWinds Database Performance Analyzer (DPA) 2022.4 and earlier, there exists a vulnerability where generated heap memory dumps can expose sensitive information in cleartext format. This exposure could lead to unauthorized access to critical data, thus posing significant risks to the integrity and confidentiality of stored information. Organizations utilizing affected versions are strongly urged to upgrade to later releases and implement appropriate security measures to mitigate potential data breaches.

References