HTTP: SolarWinds Orion Platform Authentication Bypass
This signature detects attempts to exploit a known vulnerability against SolarWinds Orion. A successful attack can lead to Authentication bypass.
Extended Description
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
Affected Products
Solarwinds orion_platform
References
CVE: CVE-2020-10148
Short Name
HTTP:CTS:SOLARWINDS-ORION-ABYPS
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Authentication Bypass CVE-2020-10148 Orion Platform SolarWinds
Release Date
01/28/2021
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3355
False Positive
Unknown
Vendors
Solarwinds
CVSS Score
7.5