.. / CVE-2020-10148

• Auth Bypass
• Nuclei
• Web

Exploit for SolarWinds Orion API - Auth Bypass (CVE-2020-10148)

Description:

SolarWinds Orion API is vulnerable to an authentication bypass vulnerability that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

Nuclei Template

View the template here CVE-2020-10148.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-10148.yaml

References: