Description
It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Orion | 2020.2.6 HF 2 and previous versions – < 2020.2.6 HF 3 | 2020.2.6 HF 3 |