Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Platform ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 1
-
High 8.0
Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability
SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Hybrid Cloud Observability 2023.4 Release Notes
https://documentation.solarwinds.com/en/success_center/hco/content/release_notes/hco_2023-4_release_notes.htm#link7
-
GitHub Advisory Database vom 2023-11-01
https://github.com/advisories/GHSA-rp97-446r-3x9p