CVE-2017-5199

概要

参考情報

• blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html · Third Party Advisory
• securityfocus.com/bid/97090 · Third Party Advisory

log and event manager のその他の脆弱性

• CVE-2017-5198高 8.8SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/l…
• CVE-2015-7840高 7.5The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrar…
• CVE-2014-5504高 7.5SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the da…