medium6.8
CVE-2021-35248
It has been reported that any Orion user, e.g.
Impact
It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Orion Platform | before 2020.2.6 Version 2020.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm
- https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35248
- https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm
- https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35248