CVE-2019-12864

MEDIO 5.5CVE-2019-12864 · Published 04/05/2020 · updated 17/06/2026

In breve

CVE-2019-12864 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda netpath (solarwinds), network performance monitor (solarwinds), orion platform (solarwinds).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
netpath solarwinds	`= 1.1.4`	No fix yet
network performance monitor solarwinds	`= 12.4`	No fix yet
orion platform solarwinds	`= 2018.4`	No fix yet

Description

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.

References

esecforte.com/network-performance-monitor-india-esec-forte-technologies · Exploit
solarwinds.com/network-performance-monitor · Vendor Advisory

Altre vulnerabilità di netpath

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free