ZDI-CAN-13453: SolarWinds Orion Platform NCM SCM IPAM SaveUserSetting Improper Access Control Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper control of access to this endpoint. An attacker can leverage this vulnerability to escalate privileges from Guest to Administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-13453?
The severity of ZDI-CAN-13453 is high due to its potential for privilege escalation.
How do I fix ZDI-CAN-13453?
To fix ZDI-CAN-13453, apply the latest security patches provided by SolarWinds for the Orion Platform.
What systems are affected by ZDI-CAN-13453?
ZDI-CAN-13453 affects installations of the SolarWinds Orion Platform that allow remote attacks.
What type of attacks can exploit ZDI-CAN-13453?
ZDI-CAN-13453 can be exploited by remote attackers seeking to escalate privileges on the affected system.
Is authentication required to exploit ZDI-CAN-13453?
Yes, authentication is required to exploit ZDI-CAN-13453.