Arbitrary Code Execution Vulnerability in SolarWinds LEM (SIEM) Editbanner Feature

Arbitrary Code Execution Vulnerability in SolarWinds LEM (SIEM) Editbanner Feature

CVE-2017-5199 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.

Learn more about our User Device Pen Test.