CVEvulnerability
CVE-2014-5504
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-09-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.
Affected configurations
• solarwinds log and event manager (<= 5.7.0)
• solarwinds log and event manager 5.2.0
• solarwinds log and event manager 5.4.0
• solarwinds log and event manager 5.5.0
• solarwinds log and event manager 5.6.0
Related
Weakness · not in database (1)
References
- http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm www.solarwinds.com
- http://www.zerodayinitiative.com/advisories/ZDI-14-303/ www.zerodayinitiative.com
- http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm www.solarwinds.com
- http://www.zerodayinitiative.com/advisories/ZDI-14-303/ www.zerodayinitiative.com