SolarWinds Orion API authentication bypass allows remote comand execution Vulnerability Note VU#843464 December 26, 2020 https://kb.cert.org/vuls/id/843464
Here's an interesting little bit: SolarWinds is owned by Thoma Bravo holdings it seems. The same corp. that owns Sophos, a majority stake in McAfee and a whole bunch of others. Good thing it has all those assets; prob. there are-- or will be-- lawsuits stemming from that breach. Thoma Bravo Portfolio Companies Apologies if this has been posted already elsewhere.
