Tracker / CVE-2021-35244
CVE-2021-35244
Medium 6.8
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
Affected products and versions
| solarwinds | orion_platform |
|---|---|
| solarwinds | orion_platform · … → 2020.2.6 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.