CVE-2020-12608

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.

Se detectó un problema en SolarWinds MSP PME (Patch Management Engine) Cache Service versiones anteriores a 1.1.15, en el Advanced Monitoring Agent. Posee permisos de archivo no seguros para %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. Esto puede conllevar a una ejecución de código al cambiar el parámetro SISServerURL del archivo CacheService.xml.