CVE-2021-35225 — Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5
Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to a…
Published: 2021-10-21 · CVSS: 5.0 · CVSS 3.1
Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7