CVE-2017-7722 in Log

Résumé

par MITRE

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 12/04/2017
• Divulgation: 12/04/2017
• Modérer: accepté
• Entrée: VDB-99752
• CPE: prêt
• CWE: CWE-77 (confirmé)
• CVSS: 10.0 (NVD)
• EPSS: 0.12730
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7722
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7722
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7722/