Design/Logic Flaw

This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper...

CVE-2021-27258

SolarWinds Orion Platform 2020.2 is affected by CVE-2021-27258 through an improper access control in the SaveUserSetting endpoint, enabling unauthenticated privilege escalation from Guest to Administrator. This is a network-authless issue, with multiple sources (ZDI advisory ZDI-21-192, Red Hat a...