CVE-2017-5199

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.

• CWE-732

• http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.htmlThird Party Advisory
• http://www.securityfocus.com/bid/97090Third Party Advisory, VDB Entry
• http://blog.0xlabs.com/2017/03/solarwinds-lem-ssh-jailbreak-and.htmlThird Party Advisory
• http://www.securityfocus.com/bid/97090Third Party Advisory, VDB Entry

Published

Mar 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5193The nickcmp function in Irssi before 0.8.21 allows remote at…
• CVE-2017-5194Use-after-free vulnerability in Irssi before 0.8.21 allows r…
• CVE-2017-5195Irssi 0.8.17 before 0.8.21 allows remote attackers to cause …
• CVE-2017-5196Irssi 0.8.18 before 0.8.21 allows remote attackers to cause …
• CVE-2017-5197There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x befo…
• CVE-2017-5198SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo…
• CVE-2017-5200Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before…
• CVE-2017-5201NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2…
• CVE-2017-5202The ISO CLNS parser in tcpdump before 4.9.0 has a buffer ove…
• CVE-2017-5203The BOOTP parser in tcpdump before 4.9.0 has a buffer overfl…
• CVE-2017-5204The IPv6 parser in tcpdump before 4.9.0 has a buffer overflo…
• CVE-2017-5205The ISAKMP parser in tcpdump before 4.9.0 has a buffer overf…