Lucene search

[email protected]CVE-2021-35244

HistoryDec 20, 2021 - 9:15 p.m.

CVE-2021-35244

2021-12-2021:15:08

CWE-434

[email protected]

web.nvd.nist.gov

cve-2021-35244

log alert to a file

unauthorized file upload

remote code execution

nvd

orion platform

security vulnerability

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

71.6%

JSON

The “Log alert to a file” action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.

Affected configurations

NVD

Node

solarwindsorion_platformRange<2020.2.6

solarwindsorion_platformMatch2020.2.6-

solarwindsorion_platformMatch2020.2.6hotfix1

solarwindsorion_platformMatch2020.2.6hotfix2

AND

microsoftwindowsMatch-

CPENameOperatorVersion
solarwinds:orion_platformsolarwinds orion platformlt2020.2.6

CPE	Name	Operator	Version
solarwinds:orion_platform	solarwinds orion platform	lt	2020.2.6

CNA Affected

[
  {
    "platforms": [
      "Windows "
    ],
    "product": "Orion Platform ",
    "vendor": "SolarWinds",
    "versions": [
      {
        "lessThan": " 2020.2.6 HF 3 ",
        "status": "affected",
        "version": "2020.2.6 HF 2 and previous versions ",
        "versionType": "custom"
      }
    ]
  }
]

References

documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm

support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3?language=en_US

www.solarwinds.com/trust-center/security-advisories/cve-2021-35242

www.zerodayinitiative.com/advisories/ZDI-22-375/

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

71.6%

JSON

Related for CVE-2021-35244

zdi1 prion1 cvelist1 nvd1