3593 matches found
More SolarWinds News
Microsoft analyzed details of the SolarWinds attack: Microsoft and FireEye only detected the Sunburst or Solorigate malware in December, but Crowdstrike reported this month that another related piece of malware, Sunspot, was deployed in September 2019, at the time hackers breached SolarWinds...
3 New Severe Security Vulnerabilities Found In SolarWinds Software
Cybersecurity researchers on Wednesday disclosed three severe security vulnerabilities impacting SolarWinds products, the most severe of which could have been exploited to achieve remote code execution with elevated privileges. Two of the flaws CVE-2021-25274 and CVE-2021-25275 were identified in...
3 New Severe Security Vulnerabilities Found In SolarWinds Software
Cybersecurity researchers on Wednesday disclosed three severe security vulnerabilities impacting SolarWinds products, the most severe of which could have been exploited to achieve remote code execution with elevated privileges. Two of the flaws CVE-2021-25274 and CVE-2021-25275 were identified in...
SolarWinds Orion Bug Allows Easy Remote-Code Execution and Takeover
Three serious vulnerabilities have been found in SolarWinds products: Two in the Orion User Device Tracker and one in the Serv-U FTP for Windows product. The most severe of these could allow trivial remote code execution with high privileges. The SolarWinds Orion platform is the network managemen...
A Second SolarWinds Hack Deepens Third-Party Software Fears
It appears that not only Russia but also China targeted the company, a reminder of the many ways interconnectedness can go wrong...
SolarWinds Serv-U FTP Server Path Traversal Vulnerability
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A path traversal vulnerability exists in SolarWinds Serv-U before 15.2.2 that allows authenticated directory traversal...
SolarWinds Serv-U FTP Server 跨站脚本漏洞
SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A cross-site scripting vulnerability exists in SolarWinds Serv-U before 15.2.2, which allows reflection of XSS via authentication.No detailed vulnerability details are available at this time...
CVE-2020-27994: Improper Limitation of a Pathname to a Restricted Directory
SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal...
CVE-2020-35482: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS...
Solarwinds Orion Platform 信任管理问题漏洞
SolarWinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...
PT-2021-11440
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows authenticated directory traversal. Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue...
PT-2021-16495
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.4 Description: The issue concerns the Collector Service in the SolarWinds Orion Platform, which uses Microsoft Message Queue MSMQ and fails to set proper permissions on its private queues. Th...
PT-2021-16496
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.4 Description: The issue allows any user with access to the filesystem to read database login details, including the login name and its associated password, from a file. These credentials can...
PT-2021-11773
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows for authenticated reflected XSS. Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue...
SolarWinds Serv-U File Server 跨站脚本漏洞
Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server before 15.2.2, which stems from a WEB application lacking proper authentication of client data. An authenticated attacker could...
SolarWinds Serv-U FTP Server Authorization Issues Vulnerability
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. A security vulnerability exists in SolarWinds Serv-U before 15.2.2 Hotfix 1, which stems from a directory containing a user configuration file which includes a user's password...
Solarwinds Orion Platform 代码问题漏洞
Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
CVE-2021-25274: Deserialization of Untrusted Data
The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...
PT-2021-11441
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows for Authenticated Stored XSS. This means that an authenticated attacker can inject malicious code into the application, which will then be stored and executed by the...