Authentication flaw

2020-12-1615:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords.

CPENameOperatorVersion
n-centraleq12.3.0.670

CPE	Name	Operator	Version
	n-central	eq	12.3.0.670

References

ernw.de/en/publications.html

insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/

support.solarwinds.com/SuccessCenter/s/