CVE-2024-29001: 
SolarWinds Platform vulnerability analysis and mitigation

A SolarWinds Platform SWQL Injection Vulnerability (CVE-2024-29001) was identified in the user interface of SolarWinds Platform 2024.1 and prior versions. The vulnerability was discovered and disclosed on April 18, 2024, affecting the SolarWinds Platform software. This security issue requires both authentication and user interaction to be exploited (SolarWinds Advisory).

The vulnerability is classified as an SQL Injection type vulnerability (CWE-89) that affects the SWQL functionality in the SolarWinds Platform user interface. It has received a CVSS v3.1 base score of 7.5 (High) with the vector string CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L, indicating adjacent network attack vector, low attack complexity, required privileges and user interaction, and high confidentiality impact (NVD).

The vulnerability could potentially allow an authenticated attacker to perform SWQL injection attacks through the user interface, which could lead to unauthorized access to data or system manipulation (SolarWinds Advisory).

The vulnerability requires both authentication and user interaction to be exploited, which somewhat limits its exploitability. The attack vector is adjacent network, meaning the attacker needs to be in a network position adjacent to the vulnerable system (NVD).

SolarWinds has released a fix for this vulnerability in SolarWinds Platform 2024.1 SR1. Users are advised to upgrade to this version to mitigate the vulnerability (Release Notes).

The vulnerability was responsibly reported by security researchers Jean-Michel Huguet and Arnoldas Radisauskas working with NATO (Release Notes).