CVE-2021-25275

SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and its associated password. Then, the credentials can be used to get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds applications, and leads to admin access to the applications by inserting or changing authentication data stored in the Accounts table of the database.

• CWE-798

• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/Exploit, Third Party Advisory
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/Exploit, Third Party Advisory

Published

Feb 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25268Multiple XSS vulnerabilities in Webadmin allow for privilege…8.4
• CVE-2021-25269A local administrator could prevent the HMPA service from st…4.4
• CVE-2021-25270A local attacker could execute arbitrary code with administr…6.7
• CVE-2021-25271A local attacker could read or write arbitrary files with ad…6
• CVE-2021-25273Stored XSS can execute as administrator in quarantined email…4.8
• CVE-2021-25274The Collector Service in SolarWinds Orion Platform before 20…9.8
• CVE-2021-25276In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a dire…7.1
• CVE-2021-25277FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the al…6.1
• CVE-2021-25278FTAPI 4.0 through 4.10 allows XSS via an SVG document to the…4.8
• CVE-2021-25281An issue was discovered in through SaltStack Salt before 300…9.8
• CVE-2021-25282An issue was discovered in through SaltStack Salt before 300…9.1
• CVE-2021-25283An issue was discovered in through SaltStack Salt before 300…9.8