The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring allows a intruder to escalate their privileges or execute arbitrary code.

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring involves unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor to increase their privileges or execute arbitrary code...

CVE-2021-35244

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...