EUVD-2021-21864

Malware in sbrugna...

EUVD-2021-21862

Malware in sbrugna...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35221

Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...

Improper access control

Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

Information disclosure

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35221

CVE-2021-35221 corresponds to SolarWinds Orion Platform: Improper Access Control Tampering via ImportAlert in the Alerts Settings page, enabling a Remote Code Execution (RCE). The Nessus entries corroborate the same CVE within a set of vulnerabilities affecting SolarWinds Orion 2020.2.x before HF...

CVE-2021-35221 ImportAlert Improper Access Control Tampering Vulnerability

Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2021-35219 ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35219

SolarWinds Orion Platform prior to 2020.2.6 HF1 is affected by CVE-2021-35219: ExportToPdfCmd Arbitrary File Read via the ImportAlert function in the Alerts Settings page. The vulnerability allows an authenticated, remote attacker to read arbitrary files. Remediation is to upgrade to 2020.2.6 HF1...

PT-2021-20846 · Solarwinds · Oroplatform

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an Improper Access Control Tampering Vulnerability using the ImportAlert function, which can lead to a Remote Code Execution RCE...