CVE-2017-5199

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-03-24

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Log And Event Manager (Solarwinds)

References

• http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html
• http://www.securityfocus.com/bid/97090