CVE-2020-27871: SolarWinds Orion Platform NCM VulnerabilitySettings Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.
Other sources
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-27871.
What is the severity of CVE-2020-27871?
The severity of CVE-2020-27871 is critical with a severity value of 7.2.
What software is affected by CVE-2020-27871?
SolarWinds Orion Platform 2020.2.1 is affected by CVE-2020-27871.
How does the vulnerability CVE-2020-27871 work?
CVE-2020-27871 allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1 by bypassing the existing authentication mechanism and exploiting a directory traversal vulnerability.
How can I fix CVE-2020-27871?
It is recommended to apply the latest security patch or upgrade to a non-vulnerable version of SolarWinds Orion Platform.