Title

SolarWinds Storage Resource Monitor Profiler SQL Injection Vulnerability (Cat I impact)

Discussion

SolarWinds has released a security advisory addressing a vulnerability in Storage Manager Server Profiler ((formerly Storage Manager (STM)). SRM Profiler monitors storage arrays and helps with locating and resolving storage related issues. To exploit this vulnerability, an attacker would upload a malicious script to the affected application. If successfully exploited, the attacker would compromise the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-70323

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.