Описание
An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
Ссылки
- Vendor Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Одно из
EPSS
8.9 High
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
Связанные уязвимости
An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
Уязвимость программного обеспечения сетевого мониторинга SolarWinds Orion Platform, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю повысить свои привилегии до уровня администратора
EPSS
8.9 High
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2