CVE-2023-33228

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-33228
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.

4.9 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228 Vendor Advisory
https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:network_configuration_manager:*:*:*:*:*:*:*:*
History

09 Nov 2023, 13:17

Type Values Removed Values Added
First Time Solarwinds network Configuration Manager
Solarwinds
References (MISC) https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228 - (MISC) https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228 - Vendor Advisory
References (MISC) https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm - (MISC) https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm - Release Notes
CPE cpe:2.3:a:solarwinds:network_configuration_manager:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.5 		v2 : unknown
v3 : 4.9

01 Nov 2023, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-01 16:15

Updated : 2023-11-09 13:17

NVD link : CVE-2023-33228

Mitre link : CVE-2023-33228

JSON object : View

Products Affected

solarwinds

  • network_configuration_manager
CWE
CWE-311

Missing Encryption of Sensitive Data