SolarWinds Platform Access Control Bypass Vulnerability (CVE-2023-3622)

Summary

An Access Control Bypass Vulnerability exists in the SolarWinds Platform that, if exploited, could allow an underprivileged user to read an arbitrary resource.

Affected Products

  • SolarWinds Platform version 2023.2.1 and prior versions

Fixed Software Release

Acknowledgments

  • Alex Shepard

Advisory Details
Severity
Medium
Advisory ID
First Published
07/18/2023
Last Published
07/18/2023
Fixed Version
CVSS Score
Download PDF
Send an Email