CVEvulnerability
CVE-2022-47508
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-287
Description
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.
Affected configurations
• solarwinds server and application monitor 2022.4
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm Release Notes
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 Vendor Advisory
- https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm Release Notes
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 Vendor Advisory