CVE-2023-23843

Description

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

Reserved 2023-01-18 | Published 2023-07-26 | Updated 2024-10-23 | Assigner SolarWinds

Problem types

CWE-697 Incorrect Comparison

Product status

Default status
unaffected

Any version before 2023.3
affected

Credits

SolarWinds would like to thank Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative for reporting on the issue in a responsible manner. finder

References

www.solarwinds.com/...ter/security-advisories/cve-2023-23843

documentation.solarwinds.com/...orm_2023-3_release_notes.htm

cve.org (CVE-2023-23843)

nvd.nist.gov (CVE-2023-23843)

Download JSON