SolarWinds Database Performance Analyzer < 2025.3 Hard-coded Cryptographic Key (CVE-2025-26398)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(299666);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/23");

  script_cve_id("CVE-2025-26398");
  script_xref(name:"IAVB", value:"2025-B-0146");

  script_name(english:"SolarWinds Database Performance Analyzer < 2025.3 Hard-coded Cryptographic Key (CVE-2025-26398)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host has an installation of SolarWinds Database Performance Analyzer that is affected by a hard-coded cryptographic key vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the SolarWinds Database Performance Analyzer (DPA) installation on the 
remote host is prior to 2025.3. It is, therefore, affected by a hard-coded cryptographic key vulnerability. 

If exploited, this vulnerability could allow a machine-in-the-middle (MITM) attack against users. Exploitation 
requires additional software not installed by default, local access to the server, and administrator level 
privileges on the host.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version 
number.");
  # https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26398
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a9b306ea");
  script_set_attribute(attribute:"solution", value:
"Update SolarWinds Database Performance Analyzer to version 2025.3 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:H/Au:M/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-26398");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/02/20");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:solarwinds:database_performance_analyzer");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("solarwinds_dpa_win_installed.nbin", "solarwinds_dpa_nix_installed.nbin");
  script_require_keys("installed_sw/SolarWinds Database Performance Analyzer");

  exit(0);
}


include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'SolarWinds Database Performance Analyzer', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
        { 'fixed_version' : '2025.3' }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);