Security Advisory

CVE-2020-12608

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-07 16:29:23

Last updated 2024-08-04 12:04:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.

← Browse all CVEs View on cve.org ↗