CVE-2014-5504: High severity SolarWinds Log and Event Manager vulnerability
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5504?
CVE-2014-5504 is classified as a high severity vulnerability due to the use of static credentials, which can lead to database access and arbitrary code execution.
How do I fix CVE-2014-5504?
To fix CVE-2014-5504, upgrade your SolarWinds Log and Event Manager to version 6.0 or later, which addresses the vulnerability.
Who is affected by CVE-2014-5504?
CVE-2014-5504 affects all versions of SolarWinds Log and Event Manager prior to 6.0, including 5.2.0 to 5.7.0.
What type of attacks can CVE-2014-5504 facilitate?
CVE-2014-5504 can facilitate remote attacks that exploit static credentials for unauthorized database access and arbitrary code execution.
What are the potential impacts of CVE-2014-5504?
The potential impacts of CVE-2014-5504 include data theft, integrity compromise, and unauthorized control over the affected databases.