Documentation forSolarWinds Platform Self-Hosted

SolarWinds Platform 2024.4.1 release notes

Release date: December 4, 2024

SolarWinds Platform 2024.4.1 is a service release providing bug and security fixes for release 2024.4. For information about the 2024.4 release, including EOL notices and upgrade information, see SolarWinds Platform 2024.4 Release Notes.

Fixes

Case number Description
01787803

In environments that make heavy use of the WMI polling method, WMI polling no longer fails with the message No such host is known.

01775614, 01797044

If the National Institute of Standards and Technology (NIST) does not include data about a device type in the Common Platform Enumeration (CPE) Dictionary, the missing data no longer prevents SolarWinds Observability Self-Hosted from identifying firmware vulnerabilities that affect the device.

01790612, 01795074

The Incident Number column on the All Active Alerts page displays the number of currently active incidents associated with an alert. It no longer includes incidents that occurred in the past and are no longer active.

01778801

Information that should not be available to a user because of limitations is no longer exposed in certain situations, such as a failed service initialization on an unstable database connection.

01791756, 01800049

Upgrading the SolarWinds Platform log database no longer fails with an error similar to the following if the database is contained:

Cannot resolve the collation conflict between "SQL_Latin1_General_CP1_CI_AS" and "Latin1_General_100_CI_AS_KS_WS_SC" in the equal to operation.

01785463, 01785499, 01786391, 01787163, 01787867, 01790533, 01791274, 01799572

When you open the Deployment Health tab from an additional web server, health checks run correctly.

01742235

Maps created without a container can be updated and saved.

01761260

Using a date format other than MM/DD/YYYY no longer prevents the discovery of a Power Control Unit (PCU).

01803929

When a subgroup is added to a map, the All Groups widget and Manage Groups page no longer display the subgroup as both a root level group and a subgroup.

01788280

When you select the $Name variable under Map name format, you can save the map definition.

01682272, 01749347

If a polling engine is upgraded to 2024.4 or later but agents remain on an older version, CPU data is not missing for agent-monitored Windows servers.

CVEs

Last updated: December 02, 2024

SolarWinds would like to thank the security researchers below for reporting on the issue in a responsible manner and working with our security, product, and engineering teams to fix the vulnerability.

SolarWinds CVEs

CVE-ID Vulnerability Title Description Severity Credit
CVE-2024-45717 SolarWinds Platform Cross Site Scripting Vulnerability The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction. 7.0 High Frank Lycops, NATO Cyber Security Centre

Third Party CVEs

CVE-ID Vulnerability Title Description Severity
CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 7.5 High
CVE-2024-38167 .NET and Visual Studio Information Disclosure Vulnerability .NET and Visual Studio Information Disclosure Vulnerability 6.5 Medium
CVE-2024-43485 .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability 7.5 High

Legal notices

© 2024 SolarWinds Worldwide, LLC. All rights reserved.

This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates, and/or its respective licensors.

SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR USEFULNESS OF ANY INFORMATION CONTAINED HEREIN. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY, EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks or are registered or pending registration. All other trademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.