3 ms·
SolarWinds Orion API authentication bypass allows remote command execution
- 1cvmask 6y agoEvery system is insecure if it has a static password. Whether is an update/admin/master/reset password etc. does not matter. The “sophisticated” password was solarwinds123 and brought to the attention of SolarWinds in 2019 by Vinoth Kumar: https://www.techdirt.com/articles/20201215/13203045893/security-researcher-reveals-solarwinds-update-server-was-secured-with-password-solarwinds123.shtml https://www.techdirt.com/articles/20201215/13203045893/secur...