CVE-2024-45718

Published: Feb 11, 2025Modified: Jun 17, 2026Deferred

4.6

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Exploitability: 1.5 / Impact: 2.7

Source: psirt@solarwinds.com (Secondary)

Description

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data.

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kssng_1-3-1_release_notes.htm

Source: psirt@solarwinds.com

https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45718

Source: psirt@solarwinds.com

Timeline

No history available yet.