EUVD-2022-39623

Malicious code in bioql PyPI...

CVE-2022-36966 Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference IDOR vulnerability in SolarWinds Platform 2022.3 and previous...

PT-2022-23712 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions 2022.3 and previous Description: The issue is related to insufficient control on a URL parameter, causing an insecure direct object reference IDOR vulnerability. This allowed users with Node Management rights to...

PT-2021-17897

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.5 HF1 Description: The node management page in SolarWinds Orion Platform allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permission...