CVE-2019-12864: Medium severity solarwinds netpath vulnerability
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-12864?
CVE-2019-12864 is a vulnerability in SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) that allows information leakage due to improper error handling with stack traces.
How severe is CVE-2019-12864?
CVE-2019-12864 has a severity keyword of 'medium' and a severity value of 5.5.
Which software versions are affected by CVE-2019-12864?
SolarWinds NetPath 1.1.4, SolarWinds Network Performance Monitor 12.4, and SolarWinds Orion Platform 2018.4 hotfix3 are affected by CVE-2019-12864.
How can I fix CVE-2019-12864?
To fix CVE-2019-12864, users should update to a version of SolarWinds Orion Platform, NetPath, or Network Performance Monitor that is not affected by the vulnerability.
Where can I find more information about CVE-2019-12864?
You can find more information about CVE-2019-12864 on the official SolarWinds website and on eSec Forte Technologies' website.