Skip to content
OpenAdvisories
High WID-SEC-2023-1001 3 CVEs

SolarWinds Orion: Mehrere Schwachstellen

Published Apr 18, 2023 · Updated Apr 18, 2023 · de-DE

Vendor: SolarWinds Product: Orion < 2023.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in SolarWinds Orion ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

SolarWinds Orion ist eine IT Performance-Monitoring Plattform.

Vulnerabilities 3

  • High 7.8
    CVE-2022-47505

    SolarWinds Platform Local Privilege Escalation Vulnerability

    The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.

    SolarWinds SolarWinds Platform
  • High 7.2
    CVE-2022-36963

    SolarWinds Platform Deserialization of Untrusted Data Vulnerability

    The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

    SolarWinds Platform Command Injection Vulnerability SolarWinds Platform
  • Medium 6.1
    CVE-2022-47509

    SolarWinds Platform Incorrect Input Neutralization Vulnerability

    The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.

    SolarWinds SolarWinds Platform

Revision history

  1. #1

    Initiale Fassung

References