← CVE Intelligence

CVE-2020-10148

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands PUBLISHED

Description (CNA)

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

Affected (CNA)

Vendor / productVersions
SolarWinds / Orion Platformaffected 2019.4 HF 5; affected 2020.2 without hotfix; affected 2020.2 HF 1

CWE

CWE-288

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.