Description
SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2023.3.1 and previous versions | — |
Advisories 1
- WID-SEC-2023-2803 SolarWinds-Plattform: Schwachstelle ermöglicht die Ausführung von beliebigem Code mit Administratorrechten BSI CERT-Bund (WID) · Nov 1, 2023