Anonymous ID: 8d734d Dec. 29, 2020, 5:09 p.m. No.12230281   🗄️.is 🔗kun

>>12230111

>>12230205

Solarwinds Orion API authentication bypass allows remote command execution

 

Sauce: https://kb.cert.org/vuls/id/843464

 

Overview

 

The Solarwinds Orion API is vulnerable to authentication bypass that could allow a remote attacker to execute API commands.

 

Description

 

The Solarwinds Orion Platform is a suite of infrastructure and system monitoring and management products. The Solarwinds Orion API is embedded into the Orion Core and is used to interface with all Solarwinds Orion Platform products. API authentication can be bypassed by including specific parameters in the Request.PathInfo portion of a URI request, which could allow an attacker to execute unauthenticated API commands. In particular, if an attacker appends a PathInfo parameter of WebResource.adx, ScriptResource.adx, i18n.ashx, or Skipi18n to a request to a Solarwinds Orion server, Solarwinds may set the SkipAuthorization flag, which may allow the API request to be processed without requiring authentication.

 

Impact

 

This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the Solarwinds instance.