The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring allows a intruder to escalate their privileges or execute arbitrary code.

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring involves unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor to increase their privileges or execute arbitrary code...

CVE-2021-35244

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...

CVE-2021-35244

CVE-2021-35244 affects SolarWinds Orion Platform: the Log alert to a file action in Orion alert management allows an authenticated user with alert-management rights to write to arbitrary files, enabling an unrestricted file upload and remote code execution. Public disclosures (ZDI-22-375) describ...