cbcvebase.

Solarwinds Managed Service Provider Patch Management Engine vulnerabilities

1 known vulnerability affecting solarwinds/managed_service_provider_patch_management_engine.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2020-12608P3HIGHCVSS 7.8PoCfixed in 1.1.152020-05-07
CVE-2020-12608 [HIGH] CWE-276 CVE-2020-12608: An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.
nvd
Solarwinds Managed Service Provider Patch Management Engine vulnerabilities | cvebase