CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2014-5504

HIGH
7.5
CVSS Severity Score
EPSS Score0.0950%
EPSS Percentile14.26th
Published2014年9月4日
Last Modified2026年5月6日

Vulnerability Description

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.

Affected Platforms (CPE)

📦
Solarwinds

Log And Event Manager

<= 5.7.0
📦
Solarwinds

Log And Event Manager

= 5.2.0
📦
Solarwinds

Log And Event Manager

= 5.4.0
📦
Solarwinds

Log And Event Manager

= 5.5.0
📦
Solarwinds

Log And Event Manager

= 5.6.0

References & Advisories

🔗 http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
🔗 http://www.zerodayinitiative.com/advisories/ZDI-14-303/
🔗 http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
🔗 http://www.zerodayinitiative.com/advisories/ZDI-14-303/

相關漏洞威脅

CVE-2017-772210.0

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with ...

CVE-2017-76478.8

SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.

CVE-2015-78407.5

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execut...

CVE-1999-05757.5

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Acces...