Vulnerability · Published Feb 15, 2023 · Assigned by SolarWinds
CVE-2022-47508Disable NTLM: SAM 2022.4
High 7.5
In plain English
A high-severity improper authentication in Server & Application Monitor (SAM) from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.8%top 44.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Server & Application Monitor (SAM) | 2022.4.1 and prior versions – through 2022.4.1 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N