Cross-Site Request Forgery in SolarWinds Orion Network Performance Monitor

CVE-2012-2602

Summary

The SolarWinds Orion Network Performance Monitor is susceptible to multiple cross-site request forgery vulnerabilities that could allow remote attackers to hijack administrator authentication. Specifically, attackers could exploit these flaws to create unauthorized user accounts by invoking the CreateUserStepContainer action at Admin/Accounts/Add/OrionAccount.aspx. Additionally, attackers could manipulate account privileges through the ynAdminRights action at Admin/Accounts/EditAccount.aspx. To mitigate these risks, implementing security best practices, such as validating requests, is essential.

References