Summary
Ein Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um seine Privilegien zu erhöhen oder einen Cross Site Scripting Angriff durchzuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 2
-
High 7.8
SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine.
-
High 7.1
SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability
The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements.
Revision history
-
#1
Initiale Fassung
References
-
Solarwinds Platform Release Notes vom 2024-10-15
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-4_release_notes.htm#link7