Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2021-35225

Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5

Description

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds NPM

  • 2020.2.6 Hotfix 1 and previous versions to < 2020.2.6 Hotfix 2affected

References