Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-47508

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.

Published

2023-02-15T19:15:12.213

Last Modified

2024-11-21T07:32:06.707

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Secondary
CWE-287
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	solarwinds	server_and_application_monitor	2022.4	Yes

References

https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm Release Notes ([email protected])
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 Vendor Advisory ([email protected])
https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)