Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-64474
HistoryAug 03, 2021 - 12:00 a.m.

Solarwinds Orion Platform has an unspecified vulnerability

2021-08-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

31.6%

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc. A security vulnerability previously existed in Solarwinds Orion Platform 2020.2.5 HF1, which stems from the SolarWinds Orion Platform’s node management page allowing an accounts to create or delete nodes (out-of-bounds for attackers to exploit the vulnerability) because the node ids are predictable (the numbers are incremental) and the access control of Services NodeManagement is also predictable. An attacker could exploit this vulnerability to bypass authentication.

0.001 Low

EPSS

Percentile

31.6%

Related for CNVD-2021-64474