CVE Catalog

CVE-2023-3622

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.65%

46th percentile - higher than 46% of all known CVEs

Summary

Access control bypass vulnerability in the SolarWinds platform that allows an underprivileged user to read arbitrary resources.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially leading to privacy breaches and information security issues.

Recommendation

It is recommended to review and strengthen access controls in the SolarWinds platform and monitor access logs for unauthorized attempts.

Original NVD description (English source)

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource

Vulnerability data from NVD (NIST) · CISA KEV · EPSS