SolarWinds Orion Platform 2020.2.1 Hotfix 1

CPE Details

SolarWinds Orion Platform 2020.2.1 Hotfix 1
solarwinds
orion_platform
2020.2.1
2020-09-18
16h35 +00:00
2020-09-18
16h35 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:solarwinds:orion_platform:2020.2.1:hotfix1:*:*:*:*:*:*

Informations

Vendor

solarwinds

Product

orion_platform

Version

2020.2.1

Update

hotfix1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-23845 2023-09-13 22h07 +00:00 The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
7.2
High
CVE-2023-23840 2023-09-13 22h07 +00:00 The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
7.2
High
CVE-2022-36963 2023-04-21 00h00 +00:00 The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.
7.2
High
CVE-2022-47505 2023-04-21 00h00 +00:00 The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.
7.8
High
CVE-2022-47509 2023-04-21 00h00 +00:00 The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.
6.1
Medium
CVE-2022-36964 2022-11-29 20h47 +00:00 SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.
8.8
High
CVE-2022-36962 2022-11-29 20h46 +00:00 SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.
7.2
High
CVE-2022-36960 2022-11-29 20h43 +00:00 SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.
8.8
High
CVE-2022-38108 2022-10-20 20h11 +00:00 SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
7.2
High
CVE-2022-36958 2022-10-20 20h10 +00:00 SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.
8.8
High
CVE-2022-36957 2022-10-20 20h08 +00:00 SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
7.2
High
CVE-2022-36966 2022-10-20 20h05 +00:00 Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.
5.4
Medium
CVE-2022-36961 2022-09-30 16h06 +00:00 A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.
8.8
High
CVE-2021-35234 2021-12-20 20h08 +00:00 Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.
8.8
High
CVE-2021-35244 2021-12-20 20h08 +00:00 The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
7.2
High
CVE-2021-35248 2021-12-20 20h08 +00:00 It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.
6.8
Medium
CVE-2021-35215 2021-09-01 14h21 +00:00 Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.
8.9
High
CVE-2021-35218 2021-09-01 12h24 +00:00 Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server
8.9
High
CVE-2021-35238 2021-09-01 09h02 +00:00 User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
4.8
Medium
CVE-2021-35213 2021-08-31 15h58 +00:00 An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting of Orion Platform version 2020.2.5. It allows a guest user to elevate privileges to the Administrator using this vulnerability. Authentication is required to exploit the vulnerability.
8.9
High
CVE-2021-35212 2021-08-31 15h00 +00:00 An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
8.9
High
CVE-2021-35240 2021-08-31 13h57 +00:00 A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.
6.5
Medium
CVE-2021-35239 2021-08-31 13h56 +00:00 A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.
7.5
High
CVE-2021-35222 2021-08-31 10h14 +00:00 This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.
9.6
Critical
CVE-2021-35221 2021-08-31 10h13 +00:00 Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.
8.1
High
CVE-2021-35220 2021-08-31 09h03 +00:00 Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.
8.1
High
CVE-2021-35219 2021-08-31 09h01 +00:00 ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.
6
Medium
CVE-2021-28674 2021-07-27 13h41 +00:00 The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node (outside of the attacker's perimeter) via an account with write permissions. This occurs because node IDs are predictable (with incrementing numbers) and the access control on Services/NodeManagement.asmx/DeleteObjNow is incorrect. To exploit this, an attacker must be authenticated and must have node management rights associated with at least one valid group on the platform.
5.4
Medium
CVE-2020-35856 2021-03-26 14h17 +00:00 SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page.
4.8
Medium
CVE-2021-3109 2021-03-26 14h14 +00:00 The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.
4.8
Medium
CVE-2020-27871 2021-02-10 21h15 +00:00 This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.
7.2
High
CVE-2020-27870 2021-02-10 21h15 +00:00 This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11917.
6.5
Medium
CVE-2021-25274 2021-02-03 15h49 +00:00 The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon processing of such messages, the service deserializes them in insecure manner, allowing remote arbitrary code execution as LocalSystem.
9.8
Critical
CVE-2021-25275 2021-02-03 15h49 +00:00 SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and its associated password. Then, the credentials can be used to get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds applications, and leads to admin access to the applications by inserting or changing authentication data stored in the Accounts table of the database.
7.8
High
CVE-2020-10148 2020-12-29 21h55 +00:00 The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
9.8
Critical