Rapid7 Vulnerability & Exploit Database

SolarWinds Orion Platform: Unprivileged Users can get DBO owner Access (CVE-2021-25275)

Back to Search

SolarWinds Orion Platform: Unprivileged Users can get DBO owner Access (CVE-2021-25275)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
02/03/2021
Created
02/06/2021
Added
02/04/2021
Modified
02/10/2021

Description

SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and its associated password. Then, the credentials can be used to get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds applications, and leads to admin access to the applications by inserting or changing authentication data stored in the Accounts table of the database.

Solution(s)

  • solarwinds-orion-platform-upgrade-latest

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;