Arbitrary File Overwrite Vulnerability

Vulnerability

In an unspecified SolarWinds product, the log file path tags are not properly sanitized, allowing a highly privileged account (e.g., administrator) to overwrite arbitrary files on the system with log output [1]. The exact affected versions are not disclosed in the available reference.

Exploitation

An attacker with high privileges can manipulate log file path tags to redirect log output to arbitrary file paths, overwriting critical system files or configuration files. No user interaction is required beyond the attacker's existing privileges.

Impact

Successful exploitation allows the attacker to corrupt arbitrary files, potentially causing denial of service, privilege escalation, or code execution if overwritten files are executed by the system. The attack targets the integrity of the system.

Mitigation

SolarWinds has released a security advisory [1] recommending customers to update to the latest version of the affected product. Specific fixed versions are not provided in the reference. No workarounds are documented.