CVE-2021-25275

SolarWinds Orion Platform before 2020.2.4 stores database credentials for the SQL Server backend in a file readable by unprivileged users. An attacker with filesystem access can read login names and passwords, then gain database owner access to SWNetPerfMon.DB and potentially administer the appli...

CVE-2021-25275

creationtimestamp| type| source ---|---|--- 2021-02-03 12:13:53+00:00| published-proof-of-concept| https://t.me/cKure/3819 2021-02-03 14:17:05+00:00| published-proof-of-concept| https://t.me/truesecator/1393 2021-02-08 09:06:27+00:00| seen| MISP/431b5ce3-4f3f-41ac-8d0d-3f30772012ff...