CVE-2020-12608

Published: 2020-05-07T17:15Z

Last Modified: 2024-11-21T04:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt