Configuration File Sensitivity Exposure in SolarWinds Products

CVE-2024-45718

Summary

A vulnerability exists that may allow non-privileged users to access sensitive information stored in a configuration file. This scenario requires local access to the system with a low-privileged account, which can grant unauthorized individuals visibility into sensitive data. It is crucial for organizations using affected SolarWinds products to review their access controls and mitigate potential risks associated with this exposure.

References