CVE-2023-3622

Summary

CVE-2023-3622 is a newly discovered access control bypass vulnerability affecting the SolarWinds platform. This issue permits an underprivileged user to gain unauthorized access to read arbitrary resources, potentially leading to data leakage or other unintended actions. The SolarWinds platform is widely used for managing and monitoring various network infrastructures, making this vulnerability significant for organizations that rely on it. Successful exploitation of this flaw requires no elevated privileges, posing a potential threat even to less privileged users. The exact scope and impact of this issue are still being assessed, but it is recommended that affected organizations apply the available patches as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.