{"id":"CVE-2024-52611","state":"PUBLISHED","title":"SolarWinds Platform Information Disclosure Vulnerability","description":"The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.","publishedAt":"2025-02-11T07:25:02.977Z","updatedAt":"2025-02-11T15:14:42.560Z","severity":{"score":3.5,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"SolarWinds"},"assigner":"SolarWinds","products":["SolarWinds SolarWinds Platform"],"affected":[{"vendor":"SolarWinds","product":"SolarWinds Platform","defaultStatus":"affected","versions":[{"version":"2024.4.1 and previous versions","status":"affected"}],"platforms":["Windows","64 bit"]}],"references":["https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm","https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52611"],"weaknesses":["CWE-209"],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/52xxx/CVE-2024-52611.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-52611","state":"PUBLISHED","datePublished":"2025-02-11T07:25:02.977Z","dateUpdated":"2025-02-11T15:14:42.560Z","assignerShortName":"SolarWinds","assignerOrgId":"49f11609-934d-4621-84e6-e02e032104d6","dateReserved":"2024-11-14T20:40:33.287Z"},"containers":{"cna":{"title":"SolarWinds Platform Information Disclosure Vulnerability","descriptions":[{"lang":"en","value":"The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions."}],"affected":[{"vendor":"SolarWinds","product":"SolarWinds Platform","defaultStatus":"affected","versions":[{"version":"2024.4.1 and previous versions","status":"affected"}],"platforms":["Windows","64 bit"]}],"references":[{"url":"https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm"},{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52611"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-209","description":"CWE-209 Generation of Error Message Containing Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SolarWinds","orgId":"49f11609-934d-4621-84e6-e02e032104d6","dateUpdated":"2025-02-11T07:25:02.977Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Vicky Malekar, Ravi Khanchani and Techsa SolarWinds Team"}],"impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"SolarWinds recommends customers upgrade to SolarWinds Platform 2025.1 as soon as it becomes available. <br>"}],"value":"SolarWinds recommends customers upgrade to SolarWinds Platform 2025.1 as soon as it becomes available."}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-11T15:14:29.023205Z","id":"CVE-2024-52611","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-11T15:14:42.560Z"}}]}}}