important · Remote code execution
A non-default SolarWinds Observability Self-Hosted configuration permits unauthenticated server code execution.
Affects
SolarWinds Observability Self-Hosted, an on-premises monitoring and observability platform running on Windows Server.
SolarWinds attributes the result to insufficient integrity checking on an undisclosed remotely reachable input path. The required configuration, endpoint, accepted object and execution context remain unidentified.
Detail and 3 sources
A fix is published, but it was not read for this brief, so the item cannot lead.