Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2021-35248

Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users

Description

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Orion

Default version status: unaffected

  • 2020.2.6 HF 2 and previous versions to < 2020.2.6 HF 3affected

References