CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-12-29
SolarWinds Orion API Authentication Bypass and Remote Code Execution Vulnerability (CVE-2020-10148) Security Advisory
[Affected Scope] SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1
[Impact] A remote, unauthenticated attacker can bypass authentication mechanisms to execute arbitrary API commands, potentially leading to complete compromise of the SolarWinds instance
[Mitigation] Immediately apply the official SolarWinds hotfixes/patches and restrict external access to the Orion API port