title: Disable NTLM: SAM 2022.4
description: Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.
problem types: CWE-287 Improper Authentication
affected:
{
vendor: SolarWinds
product: Server & Application Monitor (SAM)
versions:
version: 2022.4.1 and prior versions, status: affected, lessThanOrEqual: 2022.4.1, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
]
solutions: All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.1