CVE Vulnerabilities

CVE-2023-23843

Incorrect Comparison

Published: Jul 26, 2023 | Modified: Aug 03, 2023
CVSS 3.x
7.2
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

Weakness

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

Affected Software

Name Vendor Start Version End Version
Solarwinds_platform Solarwinds * 2023.3.0 (excluding)

Extended Description

This Pillar covers several possibilities:

References