High WID-SEC-2024-0301 2 CVEs

SolarWinds Platform: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Feb 5, 2024 · Updated Feb 5, 2024 · de-DE

Vendor: SolarWinds Product: Platform < 2024.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um Dateien zu manipulieren.

Product

SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.

Vulnerabilities 2

High 8.0

CVE-2023-35188

SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited.

SolarWinds SolarWinds Platform

Feb 6, 2024
High 8.0

CVE-2023-50395

SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

SolarWinds SolarWinds Platform

Feb 6, 2024

Revision history

2024-02-05 #1
Initiale Fassung

References

SolarWinds Platform 2024.1 Release Notes vom 2024-02-05
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm