Description
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | SolarWinds Platform | unspecified – ≤ 2022.3 and prior versions | — |
| SolarWinds | Orion Platform | unspecified – ≤ 2020.2.6 HF5 and prior versions | — |