CVE-2024-45718

MEDIUM EPSS 5.1%

Published Feb 11, 20251y ago · Modified Jun 17, 20262w ago

4.6 CVSS 3.1

Medium

Published Feb 11, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data.

CVSS Details

Base Score

4.6

Exploitability

1.5

Impact

2.7

Vector string

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Changed

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

5.1% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-312

References 2

documentation.solarwinds.com https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kssng_1-3-1_release_notes.htm
solarwinds.com https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45718

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.