Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Affects SolarWinds Platform

CVE-2024-45710

7.8HIGH

Key Information

Vendor
SolarWinds
Status
Solarwinds Platform
Vendor
CVE Published:
16 October 2024

Summary

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.

References

https://www.solarwinds.com/trust-center/security-advisori...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD Database
.