CVE-2021-35234 Exposed Dangerous Functions - Privileged Escalation

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...

CVE-2021-35234

CVE-2021-35234 concerns multiple exposed dangerous functions in SolarWinds Orion Platform (Network Performance Monitor/Orion.Core.Actions.dll, etc.) enabling read-only SQL injection and privilege escalation. Connected advisories (ZDI-21-1602, 1596, 1597, 1598, 1599, 1600–1604) describe remote pri...