Количество 3
Количество 3
CVE-2021-35244
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
GHSA-j7c8-fmh5-w5pf
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
BDU:2022-00154
Уязвимость реализации компонента управления «Log alert to a file» программного обеспечения сетевого мониторинга SolarWinds Orion Platform, позволяющая нарушителю повысить свои привилегии или выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-35244 The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution. | CVSS3: 6.8 | 19% Средний | около 4 лет назад |
| GHSA-j7c8-fmh5-w5pf The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution. | CVSS3: 7.2 | 19% Средний | около 4 лет назад |
 | BDU:2022-00154 Уязвимость реализации компонента управления «Log alert to a file» программного обеспечения сетевого мониторинга SolarWinds Orion Platform, позволяющая нарушителю повысить свои привилегии или выполнить произвольный код | CVSS3: 6.8 | 19% Средний | около 4 лет назад |
Уязвимостей на страницу