CVE-2022-47512: Sensitive Data Disclosure Vulnerability

Published Dec 19, 2022

Updated

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO)/ SolarWinds Platform 2022.4. No other versions are affected

Affected Software

4 affected components

All of the following

SolarWinds SolarWinds Platform=2022.4.0

Microsoft Windows

SolarWinds SolarWinds Platform=2022.4.0

Microsoft Windows

Remediation

Information

SolarWinds has released a Service Release to address this vulnerability in Hybrid Cloud Observability (HCO)/ SolarWinds Platform (2022.4.1)

Event History

Dec 19, 2022

CVE Published

04:15 PM

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Dec 21, 2022

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-47512?

The severity of CVE-2022-47512 is medium with a severity value of 5.5.

What is the vulnerability description for CVE-2022-47512?

CVE-2022-47512 is a vulnerability where sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO) / SolarWinds Platform 2022.4.

Which versions of SolarWinds Platform are affected by CVE-2022-47512?

The affected version of SolarWinds Platform for CVE-2022-47512 is 2022.4.0.

Is Microsoft Windows vulnerable to CVE-2022-47512?

No, Microsoft Windows is not vulnerable to CVE-2022-47512.

How can I fix CVE-2022-47512?

To fix CVE-2022-47512, users should update to a version of Hybrid Cloud Observability (HCO) / SolarWinds Platform that does not have this vulnerability.