CVE-2022-47508
Summary
| CVE | CVE-2022-47508 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-02-15 19:15:00 UTC |
| Updated | 2023-02-24 18:46:00 UTC |
| Description | Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Solarwinds | Server And Application Monitor | 2022.4 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SolarWinds Trust Center Security Advisories | CVE-2022-47508 | MISC | www.solarwinds.com | |
| SAM 2023.1 Release Notes | MISC | documentation.solarwinds.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: SolarWinds would like to thank Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative for reporting on the issue in a responsible manner.
There are currently no legacy QID mappings associated with this CVE.