ZDI-CAN-11903: SolarWinds Orion Platform NCM SCM IPAM SaveUserSetting Improper Access Control Privilege Escalation Vulnerability
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper restriction of this endpoint to unprivileged users. An attacker can leverage this vulnerability to escalate privileges their privileges from Guest to Administrator.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SolarWinds Orion |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-11903?
ZDI-CAN-11903 is considered a critical vulnerability due to its potential for remote privilege escalation without authentication.
How do I fix ZDI-CAN-11903?
To mitigate ZDI-CAN-11903, apply the latest security patches provided by SolarWinds for the Orion Platform.
Who can exploit ZDI-CAN-11903?
ZDI-CAN-11903 can be exploited by remote attackers without requiring any authentication.
What consequences does ZDI-CAN-11903 pose?
Exploitation of ZDI-CAN-11903 can lead to unauthorized privilege escalation, allowing attackers to gain elevated access to the impacted system.
Is authentication needed to exploit ZDI-CAN-11903?
No, authentication is not required to exploit ZDI-CAN-11903, making it particularly dangerous.
- agent/severity
- agent/title
- agent/references
- agent/type
- agent/description
- agent/source
- agent/event
- agent/softwarecombine
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-192
- alias/ZDI-CAN-11903
- alias/CVE-2021-27258
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/solarwinds
- canonical/solarwinds orion platform