{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-08-27T00:00:00", "descriptions": [{"lang": "en", "value": "SolarWinds Log and Event Manager before 6.0 uses \"static\" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-09-04T16:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-303/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-5504", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SolarWinds Log and Event Manager before 6.0 uses \"static\" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.zerodayinitiative.com/advisories/ZDI-14-303/", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-303/"}, {"name": "http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm", "refsource": "CONFIRM", "url": "http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T11:48:49.470Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-303/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-5504", "datePublished": "2014-09-04T17:00:00", "dateReserved": "2014-08-28T00:00:00", "dateUpdated": "2024-08-06T11:48:49.470Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:solarwinds:log_and_event_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "97D16E76-A32B-47DF-BB11-7404526FF1FA", "versionEndIncluding": "5.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:solarwinds:log_and_event_manager:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB5D00CB-0F36-45EC-B72A-51ACAC05B62C", "vulnerable": true}, {"criteria": "cpe:2.3:a:solarwinds:log_and_event_manager:5.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "5F2A977A-0A83-4672-9DCB-5C137B15AE64", "vulnerable": true}, {"criteria": "cpe:2.3:a:solarwinds:log_and_event_manager:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "2098D634-C2F5-4DEF-86DB-483BF860D1CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:solarwinds:log_and_event_manager:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "8F1B9FF2-BAA4-4FB6-940F-E08F5F380578", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SolarWinds Log and Event Manager before 6.0 uses \"static\" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL."}, {"lang": "es", "value": "SolarWinds Log And Event Manager anterior a 6.0 utiliza credenciales 'est\u00e1ticas', lo que facilita a atacantes remotos obtener acceso a la base de datos y ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, relacionado con HyperSQL."}], "id": "CVE-2014-5504", "lastModified": "2014-09-08T17:00:51.870", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-09-04T17:55:08.467", "references": [{"source": "cve@mitre.org", "url": "http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm"}, {"source": "cve@mitre.org", "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-303/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-255"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}