CVE-2017-5198 - SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users

CVE-2017-5198

Summary

SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.

References

Vulnerable Configurations

cpe:2.3:a:solarwinds:log_and_event_manager:6.1:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.1:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:log_and_event_manager:6.3.0:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	97094
misc	http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.html

Last major update

03-10-2019 - 00:03

Published

24-03-2017 - 07:59

Last modified

03-10-2019 - 00:03