CVE-2020-10148 SolarWinds Orion API Auth Bypass

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•22

Detects attempts to exploit CVE-2020-10148, an authentication bypass vulnerability in SolarWinds Orion API. This rule looks for specific URI query patterns associated with the exploit, while excluding legitimate requests.