CVE-2023-23836

CVE-2023-23836 affects SolarWinds Platform, specifically the 2022.4.1 release, via deserialization of untrusted data in the CredentialInitializer path that can allow a remote attacker with Orion admin-level access to execute arbitrary commands on the SolarWinds Web Console. Evidence from multiple...