Solarwinds

Log And Event Manager

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2017-5198

  • EPSS 0.1%
  • Veröffentlicht 24.03.2017 07:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.

8.8

CVE-2017-5199

  • EPSS 2.83%
  • Veröffentlicht 24.03.2017 07:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.

7.5

CVE-2015-7840

  • EPSS 19.52%
  • Veröffentlicht 15.10.2015 20:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

7.5

CVE-2015-7839

  • EPSS 8.61%
  • Veröffentlicht 15.10.2015 20:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.

7.5

CVE-2014-5504

  • EPSS 25.45%
  • Veröffentlicht 04.09.2014 17:55:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.