CVE-2020-10148

🗓️ 29 Dec 2020 21:55:16Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1129 Views

SolarWinds Orion API authentication bypass vulnerability

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for Missing Authentication for Critical Function in Solarwinds Orion_Platform	29 Dec 202003:17	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Solarwinds Orion_Platform	5 Jan 202113:42	–	githubexploit
Gitee	Exploit for Authentication Bypass Using an Alternate Path or Channel in Solarwinds Orion_Platform	20 Oct 202110:39	–	gitee
ATTACKERKB	CVE-2020-10148 SolarWinds Orion API authentication bypass and RCE	29 Dec 202000:00	–	attackerkb
Broadcom	BSA-2020-1173	15 Dec 202000:00	–	broadcom
Circl	CVE-2020-10148	28 Dec 202010:40	–	circl
CISA KEV Catalog	SolarWinds Orion Authentication Bypass Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Solarwinds Orion Platform Authorization Issues Vulnerability	26 Dec 202000:00	–	cnnvd
Check Point Advisories	SolarWinds Orion Platform Authentication Bypass (CVE-2020-10148)	28 Nov 202100:00	–	checkpoint_advisories
Cvelist	CVE-2020-10148 SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands	29 Dec 202021:55	–	cvelist

NVD

Node

solarwinds orion_platformMatch2019.4hotfix5

solarwinds orion_platformMatch2020.2-

solarwinds orion_platformMatch2020.2.1hotfix1

[
  {
    "product": "Orion Platform",
    "vendor": "SolarWinds",
    "versions": [
      {
        "status": "affected",
        "version": "2019.4 HF 5"
      },
      {
        "status": "affected",
        "version": "2020.2 without hotfix"
      },
      {
        "status": "affected",
        "version": "2020.2 HF 1"
      }
    ]
  }
]

Source	Link
kb	www.kb.cert.org/vuls/id/843464
solarwinds	www.solarwinds.com/securityadvisory
kb	www.kb.cert.org/vuls/id/843464
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

24 Oct 2025 14:36Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.94345

SSVC

solarwinds orion api authentication bypass vulnerability nvd cve-2020-10148