CVE-2022-47505

Summary

The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.

Affected Software

VendorProductVersion RangeStatus
SolarWindsSolarWinds Platform2023.1 and prior versions <= 2023.2affected

Weaknesses

  • CWE-269: CWE-269 Improper Link Resolution Before File Access ('Link Following')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References