Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-10148

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Orion Platform

  • 2019.4 HF 5affected
  • 2020.2 without hotfixaffected
  • 2020.2 HF 1affected

References