Title

Multiple Vulnerabilities in SolarWinds Log and Event Manager 6.2.0 (Cat I impact)

Discussion

SolarWinds has released the release notes addressing multiple vulnerabilities in Log Event Manager (LEM). SolarWinds Log Event Manager (LEM) is an application that normalizes logs so your rules and reports work regardless of the source. To exploit these vulnerabilities, an attacker would inject malicious commands into the affected application. If successfully exploited, the attacker would execute arbitrary code in the context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-62045

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.