SolarWinds Flaw Flagged by NATO Pen Tester

June 7, 2024 at 02:23PM SolarWinds released version 2024.2 with new features, upgrades, and security patches. This includes fixing high-severity SWQL injection bug (CVE-2024-28996), reported by a NATO-affiliated penetration tester. Other flaws fixed are a high-severity cross-site scripting flaw (CVE-2024-29004) and a medium-severity race condition vulnerability. The update also enhances map functionality and overall stability. … Read more

SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester

June 7, 2024 at 07:00AM SolarWinds released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform, including a bug reported by a NATO pentester. Version 2024.2 includes fixes for three security defects and multiple bugs in third-party components. The vulnerabilities impact SolarWinds Platform 2024.1 SR 1 and previous versions. Users are urged to update … Read more