vulnerability

SolarWinds Orion Platform: Reverse Tabnabbing and Open Redirect (CVE-2021-3109)

Severity
5
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:N)
Published
Mar 26, 2021
Added
Mar 26, 2021
Modified
Mar 31, 2021

Description

The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.

Solution

solarwinds-orion-platform-upgrade-2020_2_5
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.