Description
Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | NPM | 2020.2.6 Hotfix 1 and previous versions – < 2020.2.6 Hotfix 2 | 2020.2.6 Hotfix 2 |