CVE:CVE-2022-36962
CNNVD:CNNVD-202211-3657
SolarWinds Platform是美国SolarWinds公司的一个统一监控、可观察性和服务管理平台。
SolarWinds Platform存在命令注入漏洞，该漏洞源于容易受到命令注入的影响，允许远程攻击者完全控制SolarWinds数据库以执行任意命令。
solution:Upgrade solarwinds orion_platform to a higher version than 2020.2.6,2020.2.6,2020.2.6:hotfix1,2020.2.6:hotfix2,2020.2.6:hotfix3,2020.2.6:hotfix4,2020.2.6:hotfix5,2022.2,2022.3,and avoid the version (,2020.2.6),2020.2.6,2020.2.6:hotfix1,2020.2.6:hotfix2,2020.2.6:hotfix3,2020.2.6:hotfix4,2020.2.6:hotfix5,2022.2,2022.3