CVE-2023-33228CWE-311

SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

Medium · published November 1, 2023

CVSS v3.1
4.5
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.8th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2023-11-01T15:32Z
EPSS history
Timeline
  • 01 NOV 15:32Z
    SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability
    cvelistv5