CVE-2023-33228 MEDIUM

CVE-2023-33228: SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability

Vendor Solarwinds
Product Network Configuration Manager
Weakness CWE-311 · Missing encryption
Published November 1, 2023
Last update September 5, 2024
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.

Key dates

02Disclosure timeline

November 1, 2023 CVE published
September 5, 2024 Record updated