Vulnerability Details CVE-2023-33228
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.8%
CVSS Severity
CVSS v3 Score 4.5
References
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228
Products affected by CVE-2023-33228
-
cpe:2.3:a:solarwinds:network_configuration_manager:2020.2.5
-
cpe:2.3:a:solarwinds:network_configuration_manager:7.2.0
-
cpe:2.3:a:solarwinds:network_configuration_manager:7.2.1
-
cpe:2.3:a:solarwinds:network_configuration_manager:7.2.2