CVE-2022-47506: SolarWinds Platform Directory Traversal Vulnerability

Published Feb 15, 2023

Updated

SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands.

Affected Software

1 affected component

SolarWinds Orion Platform=2022.4.1

Remediation

Information

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1.

Event History

Feb 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-47506?

CVE-2022-47506 is a Directory Traversal Vulnerability in the SolarWinds Platform.

How severe is CVE-2022-47506?

CVE-2022-47506 has a severity score of 7.8, which is considered high.

How does CVE-2022-47506 affect SolarWinds Orion Platform?

CVE-2022-47506 allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands in SolarWinds Orion Platform version 2022.4.1.

How can I fix CVE-2022-47506?

To fix CVE-2022-47506, users should apply the latest patches and updates provided by SolarWinds.

Where can I find more information about CVE-2022-47506?

More information about CVE-2022-47506 can be found in the SolarWinds Platform 2023.1 release notes and the SolarWinds Security Advisories page.