Agent Update after HF2?

thulsey

My company has 4 separate Orion environments, each for different subsidiaries. 3 of the 4 were affected by Sunburst, and we have since upgraded them all to HF2. 

One of the affected environments automatically updated from Agent version 2.3.0.1415 to 2.4.1.2106. However, due to our other environments' account policies, we have to update/install agents manually with a modified RPM. Now, in these environments, all agents show as "Update Available", but are otherwise functioning normally.

All environments were running 2020.2 (without hotfix) before updating to HF1, and then HF2 once it was released. The Agent update was not present until HF2 was installed. 

Is this agent update something I should be worried about? The timing is awfully close to the Sunburst remediation, so I want to be sure my assets are secure. 

adatole

Here's some information from the current security advisory info.

From here: https://www.solarwinds.com/securityadvisory/faq

"What products are NOT affected by this security vulnerability?"
"Our investigations are still early and ongoing, but based on our investigations to date, we have found no evidence that other versions of our Orion Platform products or any of our other products or agents are affected."

And from here: https://www.solarwinds.com/securityadvisory

"We have also found no evidence that any of our free tools or agents are impacted by SUNBURST."