2 matches found
Sql injection
SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...
2.1CVSS7.7AI score0.00593EPSS
SaveExploits1References1Affected Software1
CVE-2021-25275: Use of Hard-coded Credentials
SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...
7.8CVSS5.8AI score0.00593EPSS
SaveExploits1References2
20