PT-2021-5712 · Solarwinds · Solarwinds Orion Platform

Fkadibs · Published 2021-12-20 · Updated 2022-03-17 · CVE-2021-35244

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Orion Platform (affected versions not specified)

Description The issue is related to the "Log alert to a file" action within action management in the SolarWinds Orion Platform, which allows any user with Orion alert management rights to write to any file. This can be exploited by an attacker to perform an unrestricted file upload, potentially leading to remote code execution. The vulnerability is associated with an unlimited upload of dangerous file types, which can enable a remote attacker to elevate their privileges or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

CWE-264

Related Identifiers

BDU:2022-00154

CVE-2021-35244

ZDI-22-375

Affected Products

Solarwinds Orion Platform

References · 10

• https://zerodayinitiative.com/advisories/ZDI-22-375 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-35244 · Security Note
• https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm · Vendor Advisory
• https://safe-surf.ru/upload/VULN/VULN-20211224.8.pdf · Security Note
• https://solarwinds.com/trust-center/security-advisories/cve-2021-35242 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-35244 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00154 · Security Note
• https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3?language=en_US · Vendor Advisory
• https://t.me/cvenotify/26884 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021122101 · Note