SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform, which can be exploited by remote attackers to inject HTML by appending URL parameters...

PT-2023-15382 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a local adversary with a valid system user account to escalate local privileges. This is related to a Local Privilege Escalation Vulnerability in the SolarWinds...

CVE-2022-47505

CVE-2022-47505 is a Local Privilege Escalation vulnerability in the SolarWinds Platform. A ZDI advisory (ZDI-23-458) describes the flaw in the TFTP Server configuration used by SolarWinds Network Performance Monitor: an attacker with local, low-priv code can abuse a junction to read or write arbi...

CVE-2022-36963

CVE-2022-36963 describes a command-injection vulnerability in SolarWinds Platform. A remote attacker with a valid SolarWinds Platform admin account can execute arbitrary commands, as indicated by the initial description and NVD metrics (CVSSv3.1 base score 7.2, HIGH). Exploitation requires admin ...

CVE-2022-47509

CVE-2022-47509 relates to the SolarWinds Platform and is caused by an Incorrect Input Neutralization vulnerability that allows a remote attacker with a valid SolarWinds Platform account to append URL parameters to inject HTML. The entry is supported by multiple connected sources showing the same ...

CVE-2022-47505 SolarWinds Platform Local Privilege Escalation Vulnerability

The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges...

SolarWinds Platform 代码注入漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. SolarWinds Platform has a security vulnerability that can be exploited by a remote attacker to execute arbitrary commands...

CVE-2022-47509 SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML...

SolarWinds Platform 安全漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from US-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform, which can be exploited by remote attackers to elevate local privileges...

PT-2023-2811 · Solarwinds · Solarwinds Orion Platform +1

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to the SolarWinds Platform, which was susceptible to a Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds...

PT-2023-15383 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to inject HTML by appending URL parameters. This is due to the Incorrect Input Neutralization...

CVE-2022-36963 SolarWinds Platform Deserialization of Untrusted Data Vulnerability

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands...

Vulnerabilities fixed in SolarWinds Platform

Solarwinds has fixed vulnerabilities in Solarwinds Platform and the Database Performance Analyzer DPA. A pre-authenticated malicious person can exploit the vulnerabilities exploit them for attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Remote code executi...

SolarWinds Platform 2023.0 < 2023.2 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20232 advisory. - The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability...

SolarWinds Serv-U 15.3.1

The version of SolarWinds Serv-U installed on the remote host is prior to 15.3 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u153hf1 advisory. - A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to th...

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

The Russia-linked APT29 aka Cozy Bear threat actor has been attributed to an ongoing cyber espionage campaign targeting foreign ministries and diplomatic entities located in NATO member states, the European Union, and Africa. According to Poland's Military Counterintelligence Service and the CERT...

The vulnerability of the software for agentless monitoring of Solarwinds Server & Application Monitor, related to authentication procedures that allow a hacker to bypass the authentication process and access confidential information.

The vulnerability of the Solarwinds Server & Application Monitor software for agentless monitoring involves deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information through...

Threat Source newsletter (April 6, 2023) — Another friendly reminder about supply chain attacks

Welcome to this weeks edition of the Threat Source newsletter. It seems like we cant go a full calendar year without a major supply chain attack. In late 2020 we had the SolarWinds incident which, doesnt that somehow seem like five years ago but also yesterday?, then the REvil ransomware group...

Metasploit Weekly Wrap-up

Windows 11 ADF WinSock Priv Esc The new windows/local/cve202321768afdlpe exploit makes use of a brand new Windows kernel exploitation technique that leverages the new I/O ring feature introduced in Windows 11 21H2. This technique comes from Yarden Shafir research and provides a full read/write...

The vulnerability of SolarWinds Orion’s network monitoring software lies in the incorrect limitation of the path name to the restricted directory. This allows a perpetrator to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software relates to an incorrect limitation on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...