CVE-2022-36960: SolarWinds Platform Improper Input Validation
First published: Tue Nov 29 2022(Updated: )
SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.
Credit: psirt@solarwinds.com psirt@solarwinds.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SolarWinds Orion Platform | <2020.2.6 | |
| SolarWinds Orion Platform | =2020.2.6 | |
| SolarWinds Orion Platform | =2020.2.6-hotfix1 | |
| SolarWinds Orion Platform | =2020.2.6-hotfix2 | |
| SolarWinds Orion Platform | =2020.2.6-hotfix3 | |
| SolarWinds Orion Platform | =2020.2.6-hotfix4 | |
| SolarWinds Orion Platform | =2020.2.6-hotfix5 | |
| SolarWinds Orion Platform | =2022.2 | |
| SolarWinds Orion Platform | =2022.3 |
Remedy
All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2022.4
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-36960.
What is the severity of CVE-2022-36960?
The severity of CVE-2022-36960 is high with a severity value of 8.8.
What software is affected by CVE-2022-36960?
SolarWinds Orion Platform versions 2020.2.6 and later, including versions 2022.2 and 2022.3, are affected by CVE-2022-36960.
How does CVE-2022-36960 impact SolarWinds Platform?
CVE-2022-36960 allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.
Are there any available fixes or patches for CVE-2022-36960?
It is recommended to refer to SolarWinds' documentation and security advisories for available fixes and patches for CVE-2022-36960.
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- agent/severity
- agent/title
- agent/weakness
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/solarwinds
- canonical/solarwinds orion platform
- version/solarwinds orion platform/2020.2.6
- version/solarwinds orion platform/2020.2.6-hotfix1
- version/solarwinds orion platform/2020.2.6-hotfix2
- version/solarwinds orion platform/2020.2.6-hotfix3
- version/solarwinds orion platform/2020.2.6-hotfix4
- version/solarwinds orion platform/2020.2.6-hotfix5
- version/solarwinds orion platform/2022.2
- version/solarwinds orion platform/2022.3