CVE-2021-35235 : What You Need to Know

Kiwi Syslog Server, a product by SolarWinds, is impacted by CVE-2021-35235 due to the default enabled ASP.NET debug feature. This vulnerability allows remote debugging of web applications, potentially leading to sensitive data exposure.

Understanding CVE-2021-35235

This CVE affects Kiwi Syslog Server versions 9.7.2 and previous, exposing vulnerabilities in the ASP.NET debug feature.

What is CVE-2021-35235?

The CVE-2021-35235 vulnerability arises from the default enabling of the ASP.NET debug feature in Kiwi Syslog Server. This feature permits remote debugging of web applications.

The Impact of CVE-2021-35235

The impact of this vulnerability lies in the potential exposure of sensitive information about web applications and their infrastructure to malicious attackers.

Technical Details of CVE-2021-35235

The technical details of this CVE include the vulnerability description, affected systems and versions, and the exploitation mechanism.

Vulnerability Description

The ASP.NET debug feature enabled by default in Kiwi Syslog Server allows remote debugging of web applications, potentially disclosing valuable information to attackers.

Affected Systems and Versions

Kiwi Syslog Server versions 9.7.2 and earlier are affected by this vulnerability due to the default configuration of the ASP.NET debug feature.

Exploitation Mechanism

Attackers can exploit this vulnerability by initiating a remote debugging session, gaining access to sensitive data about web applications and supporting infrastructure.

Mitigation and Prevention

To mitigate the risks associated with CVE-2021-35235, immediate steps, long-term security practices, and the importance of patching and updates are crucial.

Immediate Steps to Take

Users of Kiwi Syslog Server should upgrade to the latest version, 9.8, once it is available to prevent exploitation of the ASP.NET debug feature vulnerability.

Long-Term Security Practices

In addition to immediate patching, implementing robust security practices, such as regular system updates and configuration audits, can enhance the overall security posture.

Patching and Updates

SolarWinds recommends Kiwi Syslog Server customers to upgrade to version 9.8 as soon as it is released to address the ASP.NET debug feature vulnerability.