Vulnerability · Published Oct 16, 2024 · Assigned by SolarWinds
CVE-2024-45710SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
High 7.8
In plain English
A high-severity uncontrolled search path in SolarWinds Platform from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 79.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | SolarWinds Platform | SolarWinds Platform 2024.2.1 and previous versions |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H