Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-10148 PoC — SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API command

Source
https://github.com/chaitin/xray-plugins/blob/main/poc/manual/solarwinds-cve-2020-10148.yml
Associated Vulnerability
Title:SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands (CVE-2020-10148)
Description:The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
File Snapshot

 name: poc-yaml-solarwinds-cve-2020-10148
manual: true
transport: http
set:
    r1: randomInt(8000000

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →