Disable NTLM: SAM 2022.4

CVE-2022-47508

7.5HIGH

Key Information

Vendor: Solarwinds
Status: Server & Application Monitor (sam)
Vendor: CVE Published:; 15 February 2023

Summary

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.

Affected Version(s)

Server & Application Monitor (SAM) <= 2022.4.1

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Feb 15, 2023
Vulnerability Reserved.
Dec 15, 2022

Collectors

NVD DatabaseMitre Database

Credit

SolarWinds would like to thank Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative for reporting on the issue in a responsible manner.