CVE-2024-45713 - Vulnerability Details - OpenCVE

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Solarwinds	Kiwi Cattools

Configuration 1 [-]

cpe:2.3:a:solarwinds:kiwi_cattools:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45713

History

Tue, 25 Feb 2025 17:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Solarwinds Solarwinds kiwi Cattools
CPEs		cpe:2.3:a:solarwinds:kiwi_cattools::::::::
Vendors & Products		Solarwinds Solarwinds kiwi Cattools

Thu, 17 Oct 2024 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 17 Oct 2024 11:15:00 +0000

Type	Values Removed	Values Added
Description		SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.
Title		SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability
Weaknesses		CWE-209
References		https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45713
Metrics		cvssV3_1 `{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L'}`

MITRE

Status: PUBLISHED

Assigner: SolarWinds

Published: 2024-10-17T11:02:33.170Z

Updated: 2024-10-17T13:38:01.107Z

Reserved: 2024-09-05T08:28:03.887Z

Link: CVE-2024-45713

Vulnrichment

Updated: 2024-10-17T13:37:57.554Z

NVD

Status : Analyzed

Published: 2024-10-17T11:15:10.850

Modified: 2025-02-25T17:15:36.083

Link: CVE-2024-45713

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-45713", "assignerOrgId": "49f11609-934d-4621-84e6-e02e032104d6", "state": "PUBLISHED", "assignerShortName": "SolarWinds", "dateReserved": "2024-09-05T08:28:03.887Z", "datePublished": "2024-10-17T11:02:33.170Z", "dateUpdated": "2024-10-17T13:38:01.107Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Kiwi CatTools", "vendor": "SolarWinds", "versions": [{"status": "affected", "version": "Kiwi CatTools 3.12 and previous versions"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes."}], "value": "SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes."}], "impacts": [{"capecId": "CAPEC-54", "descriptions": [{"lang": "en", "value": "CAPEC-54 Query System for Information"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "49f11609-934d-4621-84e6-e02e032104d6", "shortName": "SolarWinds", "dateUpdated": "2024-10-17T11:02:33.170Z"}, "references": [{"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45713"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "All SolarWinds customers are advised to upgrade to the latest version of the SolarWinds Kiwi CatTools 3.12.4<br>"}], "value": "All SolarWinds customers are advised to upgrade to the latest version of the SolarWinds\u00a0Kiwi CatTools 3.12.4"}], "source": {"discovery": "UNKNOWN"}, "title": "SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-17T13:37:53.109115Z", "id": "CVE-2024-45713", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-17T13:38:01.107Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-45713", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-17T13:37:53.109115Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-17T13:37:57.554Z"}}], "cna": {"title": "SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-54", "descriptions": [{"lang": "en", "value": "CAPEC-54 Query System for Information"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SolarWinds", "product": "Kiwi CatTools", "versions": [{"status": "affected", "version": "Kiwi CatTools 3.12 and previous versions"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "All SolarWinds customers are advised to upgrade to the latest version of the SolarWinds\u00a0Kiwi CatTools 3.12.4", "supportingMedia": [{"type": "text/html", "value": "All SolarWinds customers are advised to upgrade to the latest version of the SolarWinds Kiwi CatTools 3.12.4<br>", "base64": false}]}], "references": [{"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45713"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.", "supportingMedia": [{"type": "text/html", "value": "SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information"}]}], "providerMetadata": {"orgId": "49f11609-934d-4621-84e6-e02e032104d6", "shortName": "SolarWinds", "dateUpdated": "2024-10-17T11:02:33.170Z"}}}, "cveMetadata": {"cveId": "CVE-2024-45713", "state": "PUBLISHED", "dateUpdated": "2024-10-17T13:38:01.107Z", "dateReserved": "2024-09-05T08:28:03.887Z", "assignerOrgId": "49f11609-934d-4621-84e6-e02e032104d6", "datePublished": "2024-10-17T11:02:33.170Z", "assignerShortName": "SolarWinds"}, "dataVersion": "5.1"}