SolarWinds Orion Platform 2020.2.0 < 2020.2.6 Multiple Vulnerabilities

The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.6. It is, therefore, affected by multiple vulnerabilities as referenced in the orionplatform202026 advisory. - An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting ...

CVE-2021-35213

CVE-2021-35213 affects SolarWinds Orion Platform 2020.2.5, with a flaw in the User Setting (SaveUserSetting) that lets a Guest escalate to Administrator. Authentication is required. Connected sources identify this as a privilege-escalation via improper access control in Orion Platform 2020.2.5; n...