CVE-2024-38819 - Spring Framework Path Traversal vulnerability

Question

Can anyone confirm if SolarWinds Security Event Manager is impacted by the Spring Framework path traversal vulnerability (CVE-2024-38819) 
 
 Many thanks

Keshav.Kumar · Accepted Answer

SEM is not affected by this vulnerability. solarwindscore.my.site.com/.../Why-SolarWinds-SEM-is-not-affected-by-CVE-2024-38819

donrobert5 · Answer

support.solarwinds.com/working-with-support 
 https://www.solarwinds.com/information-security

beckh8 · Answer

Thanks all, I raised a support ticket with SolarWinds and they have confirmed the product is not impacted by this vulnerability

HerrDoktor · Answer

Here&lsquo;s the list of 3rd party software used by SEM https://documentation.solarwinds.com/en/success_center/sem/content/sem_third_party_software_list.htm 
 I have seen Spring on there and the version that is used seems to be in the list of affected versions. However,It has been the situation in the past, where Solarwinds used a version of Spring that was vulnerable, but did not use the affected function in spring. So you probably have to wait for an official statement from Solarwinds. 
 
 cheers

CVE-2024-38819 - Spring Framework Path Traversal vulnerability

Top Replies