CVE-2021-35219

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-35219
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.

6.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm Product Release Notes Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ExportToPdfCmd-Arbitrary-File-Read-Information-Disclosure-CVE-2021-35219?language=en_US Mitigation Patch Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US Patch Release Notes Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35219 Vendor Advisory
https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm Product Release Notes Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ExportToPdfCmd-Arbitrary-File-Read-Information-Disclosure-CVE-2021-35219?language=en_US Mitigation Patch Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US Patch Release Notes Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35219 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:12

Type Values Removed Values Added
References () https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm - Product, Release Notes, Vendor Advisory () https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm - Product, Release Notes, Vendor Advisory
References () https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ExportToPdfCmd-Arbitrary-File-Read-Information-Disclosure-CVE-2021-35219?language=en_US - Mitigation, Patch, Vendor Advisory () https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ExportToPdfCmd-Arbitrary-File-Read-Information-Disclosure-CVE-2021-35219?language=en_US - Mitigation, Patch, Vendor Advisory
References () https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US - Patch, Release Notes, Vendor Advisory () https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US - Patch, Release Notes, Vendor Advisory
References () https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35219 - Vendor Advisory () https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35219 - Vendor Advisory
CVSS v2 : 4.0
v3 : 4.9 		v2 : 4.0
v3 : 6.0
Information

Published : 2021-08-31 12:15

Updated : 2024-11-21 06:12

NVD link : CVE-2021-35219

Mitre link : CVE-2021-35219

CVE.ORG link : CVE-2021-35219

JSON object : View

Products Affected

solarwinds

  • orion_platform
CWE
NVD-CWE-noinfo

NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024