CVE-2024-45710

Summary

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.

Affected Software

VendorProductVersion RangeStatus
SolarWindsSolarWinds PlatformSolarWinds Platform 2024.2.1 and previous versionsaffected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References