CVE-2022-47508 - Disable NTLM: SAM 2022.4

Back Back to CVE browser

HIGH

Disable NTLM: SAM 2022.4

Published Feb 15, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.75%

Description

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.

Affected products

Vendor SolarWinds Product Server & Application Monitor (SAM) Default
n/a
- Version
  2022.4.1 and prior versions
  Status
  affected
  Constraints
  <=2022.4.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SolarWinds

Server & Application Monitor (SAM)

n/a

Version	Status	Constraints
2022.4.1 and prior versions	affected	<=2022.4.1

Remediation

Vendor solution

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm
Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-50269
Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508
Vendor Advisory

Link	Providers	Tags
https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-50269		Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508		Vendor Advisory