CVE-2014-5504

概要

参考情報

• solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
• zerodayinitiative.com/advisories/ZDI-14-303

log and event manager のその他の脆弱性

• CVE-2017-5199高 8.8The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /us…
• CVE-2017-5198高 8.8SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/l…
• CVE-2015-7840高 7.5The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrar…