CVE-2022-36966

Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6

Medium · published October 20, 2022

CVSS v3.1
5.4
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.7th percentile
Published
2022-10-20T20:05Z
EPSS history
Timeline
  • 20 OCT 20:05Z
    Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
    cvelistv5