CVEvulnerability
CVE-2023-33228
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-311
Description
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
Affected configurations
• solarwinds network configuration manager (< 2023.4)
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm Release Notes
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228 Vendor Advisory
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm Release Notes
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33228 Vendor Advisory