Description
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2022.3 and prior versions – ≤ 2022.3 | — |
| SolarWinds | Orion Platform | 2020.2.6 HF5 and prior versions – ≤ 2020.2.6 HF5 | — |