CVE-2024-45710: SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Published Oct 16, 2024
·Updated
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.
Affected Software
1 affected component
SolarWinds SolarWinds Platform<2024.4
Remediation
Information
SolarWinds recommends that customers upgrade to SolarWinds Platform 2024.4 as soon as it becomes available.
Event History
Oct 16, 2024
CVE Published
via MITRE·07:16 AM
Data Sourced
via MITRE·07:16 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45710?
CVE-2024-45710 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2024-45710?
To fix CVE-2024-45710, ensure that the SolarWinds Platform is updated to version 2024.4 or later.
3
Who is affected by CVE-2024-45710?
CVE-2024-45710 affects users with low privilege accounts who have local access to the affected SolarWinds Platform installations.
4
What type of vulnerability is CVE-2024-45710?
CVE-2024-45710 is an Uncontrolled Search Path Element Local Privilege Escalation vulnerability.
5
Can CVE-2024-45710 be exploited remotely?
No, CVE-2024-45710 requires local access to the affected node machine for exploitation.