SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Log_and_event_manager |
Solarwinds |
* |
6.3.1 (excluding) |
References