deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29691
Published: 2021-05-20
Description: IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 200252.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200252; https://www.ibm.com/support/pages/node/6454587; https://exchange.xforce.ibmcloud.com/vulnerabilities/200252
CVE: CVE-2021-29692
Published: 2021-05-20
Description: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 200253.
CVSS Score: 5.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200253; https://www.ibm.com/support/pages/node/6454587; https://exchange.xforce.ibmcloud.com/vulnerabilities/200253
CVE: CVE-2020-21054
Published: 2021-05-20
Description: Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/2489004c7b7e0b14e21cd86cedaab87fed209415; https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-xss-21/; https://github.com/fusionpbx/fusionpbx/commit/2489004c7b7e0b14e21cd86cedaab87fed209415
CVE: CVE-2020-21055
Published: 2021-05-20
Description: A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filerename.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/fusionpbx/fusionpbx/commit/1a88ca61a744914d3336cc15a40fb3edbcde9085; https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-6/; https://github.com/fusionpbx/fusionpbx/commit/1a88ca61a744914d3336cc15a40fb3edbcde9085
CVE: CVE-2020-21056
Published: 2021-05-20
Description: Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/fusionpbx/fusionpbx/commit/cad71240dee2a82cd5766dd67039a87849031aaa; https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-5/; https://github.com/fusionpbx/fusionpbx/commit/cad71240dee2a82cd5766dd67039a87849031aaa
CVE: CVE-2020-21057
Published: 2021-05-20
Description: Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/fusionpbx/fusionpbx/commit/026c3958c3c7ca6b2ff067addc991aac8f41cf11; https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-4/; https://github.com/fusionpbx/fusionpbx/commit/026c3958c3c7ca6b2ff067addc991aac8f41cf11
CVE: CVE-2020-35580
Published: 2021-05-20
Description: A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin's API key and the base64 encoded SHA1 password hashes of other SearchBlox users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://developer.searchblox.com/docs/getting-started-with-searchblox; https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html; https://developer.searchblox.com/docs/getting-started-with-searchblox
CVE: CVE-2021-27432
Published: 2021-05-20
Description: OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-133-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-133-03
CVE: CVE-2021-32632
Published: 2021-05-20
Description: Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery (CSRF). Hosters of the bot should upgrade to `v1.52` or `stable` to install the patch or, as a workaround, can add one modern dependency.
CVSS Score: 2.4 (LOW)
CWE: CWE-352, CWE-352
References: https://gist.github.com/Melonify/d8e5d70cdc1bebb871f72dc79d69ac60; https://github.com/pajbot/pajbot/releases/tag/v1.52; https://github.com/pajbot/pajbot/security/advisories/GHSA-wmfr-qrg4-qc3h
CVE: CVE-2021-3313
Published: 2021-05-20
Description: Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/22/1; https://plone.org/download/releases/5.2.3; https://plone.org/security/hotfix/20210518
CVE: CVE-2020-21345
Published: 2021-05-20
Description: Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/halo-dev/halo/issues/336; https://github.com/halo-dev/halo/issues/336
CVE: CVE-2021-23386
Published: 2021-05-20
Description: This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.
CVSS Score: 7.7 (HIGH)
CWE: CWE-909
References: https://github.com/mafintosh/dns-packet/commit/25f15dd0fedc53688b25fd053ebbdffe3d5c1c56; https://hackerone.com/bugs?subject=user&amp%3Breport_id=968858; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1295719
CVE: CVE-2021-28682
Published: 2021-05-20
Description: An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://blog.envoyproxy.io; https://github.com/envoyproxy/envoy/blob/15e3b9dbcc9aaa9d391fa8033904aad1ea1ae70d/api/envoy/api/v2/cluster.proto#L36; https://github.com/envoyproxy/envoy/releases
CVE: CVE-2021-28683
Published: 2021-05-20
Description: An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://blog.envoyproxy.io; https://github.com/envoyproxy/envoy/releases; https://github.com/envoyproxy/envoy/security/advisories/GHSA-r22g-5f3x-xjgg
CVE: CVE-2021-29258
Published: 2021-05-20
Description: An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://blog.envoyproxy.io; https://github.com/envoyproxy/envoy-setec/pull/230; https://github.com/envoyproxy/envoy/releases/tag/v1.14.0
CVE: CVE-2021-32630
Published: 2021-05-20
Description: Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE via .phar file upload. A php web shell can be uploaded via the Documents & Files upload feature. Someone with upload permissions could rename the php shell with a .phar extension, visit the file, triggering the payload for a reverse/bind shell. This can be mitigated by excluding a .phar file extension to be uploaded (like you did with .php .phtml .php5 etc). The vulnerability is patched in version 4.0.4.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-434
References: https://github.com/Admidio/admidio/issues/994; https://github.com/Admidio/admidio/releases/tag/v4.0.4; https://github.com/Admidio/admidio/security/advisories/GHSA-xpqj-67r8-25j2
CVE: CVE-2021-27956
Published: 2021-05-20
Description: Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes; https://raxis.com/blog/cve-2021-27956-manage-engine-xss; https://www.manageengine.com
CVE: CVE-2021-28902
Published: 2021-05-20
Description: In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252
References: https://github.com/CESNET/libyang/issues/1454; https://security.gentoo.org/glsa/202107-54; https://github.com/CESNET/libyang/issues/1454
CVE: CVE-2021-28903
Published: 2021-05-20
Description: A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/CESNET/libyang/issues/1453; https://security.gentoo.org/glsa/202107-54; https://github.com/CESNET/libyang/issues/1453
CVE: CVE-2021-28904
Published: 2021-05-20
Description: In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252
References: https://github.com/CESNET/libyang/issues/1451; https://security.gentoo.org/glsa/202107-54; https://github.com/CESNET/libyang/issues/1451
CVE: CVE-2021-28905
Published: 2021-05-20
Description: In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617).
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://github.com/CESNET/libyang/issues/1452; https://security.gentoo.org/glsa/202107-54; https://github.com/CESNET/libyang/issues/1452
CVE: CVE-2021-28906
Published: 2021-05-20
Description: In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252
References: https://github.com/CESNET/libyang/issues/1455; https://security.gentoo.org/glsa/202107-54; https://github.com/CESNET/libyang/issues/1455
CVE: CVE-2020-18220
Published: 2021-05-20
Description: Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/doramart/DoraCMS/issues/190; https://github.com/doramart/DoraCMS/issues/190
CVE: CVE-2021-22339
Published: 2021-05-20
Description: There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-dos-en
CVE: CVE-2021-22409
Published: 2021-05-20
Description: There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal.
CVSS Score: 5.3 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-02-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-02-dos-en
CVE: CVE-2021-33477
Published: 2021-05-20
Description: rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.
CVSS Score: 8.8 (HIGH)
CWE: CWE-755
References: http://cvs.schmorp.de/rxvt-unicode/Changes?view=log; http://cvs.schmorp.de/rxvt-unicode/src/command.C?r1=1.582&r2=1.583; https://git.enlightenment.org/apps/eterm.git/log/
CVE: CVE-2020-27209
Published: 2021-05-20
Description: The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key.
CVSS Score: 7.5 (HIGH)
References: https://eprint.iacr.org/2021/640; https://github.com/kmackay/micro-ecc/commit/1b5f5cea5145c96dd8791b9b2c41424fc74c2172; https://github.com/kmackay/micro-ecc/releases
CVE: CVE-2021-28798
Published: 2021-05-21
Description: A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build 20210416 and later QuTS hero h4.5.2.1638 Build 20210414 and later QNAP NAS running QTS 4.5.3 are not affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-23, CWE-284, CWE-22
References: https://www.qnap.com/zh-tw/security-advisory/qsa-21-14; https://www.qnap.com/zh-tw/security-advisory/qsa-21-14
CVE: CVE-2021-32032
Published: 2021-05-21
Description: In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/commit/?id=7e2e523a1c4e9ac7b9cc4fd551831f7639ed5ff9; https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/crypto_multi_part_ops_abort_fail.rst; https://www.trustedfirmware.org
CVE: CVE-2020-12061
Published: 2021-05-21
Description: An issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the microcontroller and the secure element transmits credentials in plain. This allows an adversary to eavesdrop the communication and derive the secrets stored in the microcontroller. As a result, the attacker is able to arbitrarily manipulate the firmware of the microcontroller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://cwe.mitre.org/data/definitions/523.html; https://eprint.iacr.org/2021/640.pdf; https://github.com/Nitrokey/nitrokey-fido-u2f-firmware/commits/master
CVE: CVE-2020-27208
Published: 2021-05-21
Description: The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-326
References: https://eprint.iacr.org/2021/640; https://github.com/solokeys/solo/commit/a9c02cd354f34b48195a342c7f524abdef5cbcec; https://solokeys.com
CVE: CVE-2020-27212
Published: 2021-05-21
Description: STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.
CVSS Score: 7.0 (HIGH)
CWE: CWE-74
References: https://eprint.iacr.org/2021/640; https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html; https://www.aisec.fraunhofer.de/en/FirmwareProtection.html
CVE: CVE-2021-29414
Published: 2021-05-21
Description: STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://eprint.iacr.org/2021/640; https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html; https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/
CVE: CVE-2021-29415
Published: 2021-05-21
Description: The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in the NordicSemiconductor nRF52840 through 2021-03-29 has a non-constant time ECDSA implemenation. This allows an adversary to recover the private ECC key used during an ECDSA operation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://eprint.iacr.org/2021/640; https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html; https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/
CVE: CVE-2020-27211
Published: 2021-05-21
Description: Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can be bypassed by injecting a fault during the boot phase.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-203
References: https://eprint.iacr.org/2021/640; https://infocenter.nordicsemi.com/pdf/in_133_v1.0.pdf; https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/
CVE: CVE-2021-32633
Published: 2021-05-21
Description: Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default, only users with the Manager role can add or edit Zope Page Templates through the web, but sites that allow untrusted users to add/edit Zope Page Templates through the web are at risk from this vulnerability. The problem has been fixed in Zope 5.2 and 4.6. As a workaround, a site administrator can restrict adding/editing Zope Page Templates through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing Zope Page Templates through the web should be restricted to trusted users only.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.openwall.com/lists/oss-security/2021/05/21/1; http://www.openwall.com/lists/oss-security/2021/05/22/1; https://cyllective.com/blog/post/plone-authenticated-rce-cve-2021-32633/
CVE: CVE-2021-31439
Published: 2021-05-21
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12326.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html; https://security.gentoo.org/glsa/202311-02; https://www.debian.org/security/2023/dsa-5503
CVE: CVE-2021-31440
Published: 2021-05-21
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.
CVSS Score: 7.0 (HIGH)
CWE: CWE-682
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=10bf4e83167cc68595b85fd73bb91e8f2c086e36; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.zerodayinitiative.com/advisories/ZDI-21-503/
CVE: CVE-2021-31473
Published: 2021-05-21
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the browseForDoc function. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13523.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-21-561/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-31474
Published: 2021-05-21
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12213.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2020-2-5_release_notes.htm; https://www.zerodayinitiative.com/advisories/ZDI-21-602/; https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2020-2-5_release_notes.htm
CVE: CVE-2021-31475
Published: 2021-05-21
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF service configuration, which allows a critical resource to be accessed by unprivileged users. An attacker can leverage this vulnerability to execute code in the context of an administrator. Was ZDI-CAN-12007.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-5_release_notes.htm; https://www.zerodayinitiative.com/advisories/ZDI-21-605/; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-5_release_notes.htm