Race Condition in SolarWinds Platform Web Console
CVE-2024-28999 Published on June 4, 2024

SolarWinds Platform Race Condition Vulnerability
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
LOW
Availability Impact:
LOW

Weakness Type

What is a Race Condition Vulnerability?

The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVE-2024-28999 has been classified to as a Race Condition vulnerability or weakness.


Products Associated with CVE-2024-28999

Want to know whenever a new CVE is published for Solarwinds Platform? stack.watch will email you.

Solarwinds Platform
 

Affected Versions

SolarWinds Platform: solarwinds_platform:

Exploit Probability

EPSS
6.48%
Percentile
90.88%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.