Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-7646] SolarWinds Log & Event Manager - Improper Access Control

bishopfox.com | vulnerability | CVE-2017-7646 | #access-control | #advisory | #solarwinds | #lem | #cve-2017-7646

Summary

Advisory for improper access control in SolarWinds LEM (CVE-2017-7646): via nano in restricted mode, an authenticated user could browse the appliance filesystem and read the admin password hash.
Published
Collected

original ↗

Related coverage

back