VULNERABILITY INTELLIGENCE
CVE-2023-33228
CVSS score4.5 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
Weakness classification
- psirt@solarwinds.com: CWE-311
Primary references
- psirt@solarwinds.com — Release Notes
- psirt@solarwinds.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory