Description
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SolarWinds Orion Core
Default version status: unaffected
2020.2.6 HF 2 and previous versions to < 2020.2.6 HF 3affected
References
- https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3 ↗
- https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm ↗
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35234 ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1598/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1596/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1604/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1600/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1601/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1602/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1597/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1599/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-1603/ ↗