CVE-2021-35226
6.5MEDIUMAn entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated ac
Published: 10/10/2022Updated: 11/21/2024
Description
An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.
AI AnalysisPowered by AI
Affected Products
solarwindsnetwork_configuration_manager
References
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35226PatchVendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35226PatchVendor Advisory