Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in der SolarWinds-Plattform ausnutzen, um Dateien zu manipulieren, Phishing-Angriffe durchzuführen oder Cross-Site Scripting (XSS)-Angriffe auszuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 3
-
High 7.5
SolarWinds Platform SWQL Injection Vulnerability
A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited.
-
High 7.5
SolarWinds Platform Cross Site Scripting Vulnerability
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction.
-
High 7.0
SolarWinds Platform Arbitrary Open Redirection Vulnerability
The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Platform 2024.1.1 release notes vom 2024-04-18
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm
-
SolarWinds Advisory
https://www.solarwinds.com/de/trust-center/security-advisories/cve-2024-28076
-
GitHub Advisory
https://github.com/advisories/GHSA-5fvw-q4g6-wqf7
-
GitHub Advisory
https://github.com/advisories/GHSA-89jm-c34p-prg4