CVE-2023-33224 — SolarWinds Platform Incorrect Behavior Order Vulnerability

Description (CNA)

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Affected (CNA)

Vendor / product	Versions
SolarWinds / SolarWinds Platform	affected 0 before 2023.3

CWE

CWE-696

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.