CVE-2023-23844 — SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability

Description (CNA)

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
SolarWinds / SolarWinds Platform	affected 0 before 2023.3

CWE

CWE-184

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23844
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23844
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.