CVE-2022-38115

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:security_event_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:15

Type Values Removed Values Added
References () https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm - Release Notes, Vendor Advisory () https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm - Release Notes, Vendor Advisory
References () https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38115 - Vendor Advisory () https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38115 - Vendor Advisory

03 Aug 2023, 19:15

Type Values Removed Values Added
Summary Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT

Information

Published : 2022-11-23 17:15

Updated : 2024-11-21 07:15


NVD link : CVE-2022-38115

Mitre link : CVE-2022-38115

CVE.ORG link : CVE-2022-38115


JSON object : View

Products Affected

solarwinds

  • security_event_manager
CWE
CWE-650

Trusting HTTP Permission Methods on the Server Side

CWE-436

Interpretation Conflict