It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
solarwinds orion_platform |
||
solarwinds orion_platform 2020.2.6 |