Security Compliance

What to do if the vulnerability scanner is reporting a cross-domain vulnerability in SEM

The vulnerability scanning utility is reporting a cross-domain vulnerability in SEM.

First published date

11/8/2018 8:00 PM

Last published date

11/8/2018 8:00 PM

Overview

The vulnerability scanning utility is reporting a cross-domain vulnerability in Security Event Manager (formerly Log & Event Manager).

Product section

Security Event Manager

Cause

This issue can occur because of the following:

  • The system is not running the latest SEM version.
  • The multimanager feature is enabled.

Resolution

  1. Upgrade SEM to the latest release and hotfix version.
  2. If you are not using the multimanager feature, verify that it is disabled.
    Note: This feature is disabled by default.
    1. Connect to SEM via the SSH console or hypervisor virtual console.
    2. Go to the appliance menu.
    3. Run multimanagerconfig and confirm that you want to disable it.
  3. Restart the Manager service.
  4. Rerun the vulnerability scan again. If the vulnerability is still reported, contact SolarWinds Support.