[CVE-2017-7646] SolarWinds Log & Event Manager - Improper Access Control

CVE

CVE-2017-7646

Published

2017-05-12 00:00

Collected

2026-07-08 08:40

---
id: 4245
title: "[CVE-2017-7646] SolarWinds Log & Event Manager - Improper Access Control"
cve: CVE-2017-7646
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/solarwinds-log-event-manager-iac-advisory"
published_at: "2017-05-12T00:00:00Z"
tags: ["access-control", "advisory", "solarwinds", "lem", "cve-2017-7646"]
phying_url: "https://phying.com/item/4245"
lang: en
---

# [CVE-2017-7646] SolarWinds Log & Event Manager - Improper Access Control

## Summary

Advisory for improper access control in SolarWinds LEM (CVE-2017-7646): via nano in restricted mode, an authenticated user could browse the appliance filesystem and read the admin password hash.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2017-7646
- **Published:** 2017-05-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/solarwinds-log-event-manager-iac-advisory
- **Phying News:** https://phying.com/item/4245