CVE-2022-47508: Disable NTLM: SAM 2022.4

Published Feb 15, 2023

Updated

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.

Affected Software

1 affected component

SolarWinds Server and Application Monitor=2022.4

Remediation

Information

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1

Event History

Feb 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-47508?

The severity of CVE-2022-47508 is high with a severity value of 7.5.

How does CVE-2022-47508 affect SolarWinds Server and Application Monitor?

CVE-2022-47508 affects SolarWinds Server and Application Monitor version 2022.4.

What is the impact of CVE-2022-47508?

The impact of CVE-2022-47508 is that customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment.

How can I fix CVE-2022-47508?

To fix CVE-2022-47508, it is recommended to refer to the release notes of SolarWinds Server and Application Monitor version 2023.1 and apply the necessary updates.

Is there any additional information about CVE-2022-47508?

Yes, you can find more information about CVE-2022-47508 in the security advisories provided by SolarWinds.