225 matches found
CVE-2024-28200
The CVE-2024-28200 involves an authentication bypass in the N-central server user interface present in all deployments prior to version 2024.2. The N-central authentication bypass allows access to restricted UI areas without credentials. Connected sources confirm affected software: N-central prio...
CVE-2024-5322 N-central Authentication Bypass via Session Rebinding
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...
CVE-2024-5322 N-central Authentication Bypass via Session Rebinding
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...
CVE-2024-5322
The CVE-2024-5322 issue affects N-central prior to 2024.3 and enables session rebinding for already authenticated users when Entra SSO is used, potentially bypassing authentication. Reported across multiple feeds (NVD/Red Hat/PT-Security and others) with a high impact (C/H, I/H) and network attac...
N-able N-Central Security Vulnerability
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability previously existed in N-able N-Central version 2024.3, which stemmed from the vulnerability to rebinding of authenticated user sessions when using Entra SSO, which could le...
N-able N-Central Security Vulnerability
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability previously existed in N-able N-Central version 2024.2, which stemmed from a user interface authentication that could be bypassed...
PT-2024-22335
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2024.2 Description The issue concerns an authentication bypass of the user interface. It was discovered through an internal source code review, and there have been no observed exploitations in the wild...
PT-2024-35667 · N-Central · N-Central
Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2024.3 Description: The issue allows session rebinding of already authenticated users when using Entra SSO, potentially leading to authentication bypass. Recommendations: For versions prior to 2024.3, update to...
N‑able N-Central 安全漏洞
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central that originates in the AutomationManager.AgentService.exe application that contains a TOCTOU contention condition that allows standard users to...
VulnCheck KEV: CVE-2024-28200
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in...
CVE-2023-47132
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...
Code injection
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...
CVE-2023-47132
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...
PT-2024-13410 · N Able · N-Able N-Central
Name of the Vulnerable Software and Affected Versions: N-able N-central versions prior to 2023.6 Description: An issue in N-able N-central allows attackers to gain escalated privileges via API calls. Recommendations: For versions prior to 2023.6, update to version 2023.6 or later to resolve the...
N-able N-central Security Vulnerabilities
N-able N-central is an RMM platform from N-able, Inc. providing large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central version 2023.6 and prior versions, which stems from a vulnerability th...
CVE-2023-47132
CVE-2023-47132 pertains to N-able N-central (pre-2023.6) where an API-call related flaw allows privilege escalation. Affected software: N-able N-central before 2023.6; impact is elevated privileges via API calls (no user interaction required). Mitigation: upgrade to version 2023.6 or later (per v...
CVE-2023-47132
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...
N-able N-central Web Interface Detection
Binary data nablencentraldetect.nbin...
