Description
Acunetix determined that it was possible to access SolarWinds Orion's sensitive files without authentication with a specially crafted HTTP request.
Remediation
Upgrade to the latest version of SolarWinds Orion
References
Related Vulnerabilities
WordPress Plugin Revive Old Post-Auto Post to Social Media Security Bypass (6.9.3)
WordPress Plugin NAB Transact Security Bypass (2.1.0)
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.19)
WordPress Plugin DW Question & Answer Security Bypass (1.2.9)
WordPress Plugin FooBox Image Lightbox Security Bypass (2.6.3)