CVE-2020-7984

SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 is affected by CVE-2020-7984. The flaw allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings and obtain other sensitive information. An attacker can use a customer ID to self-register...

CVE-2020-25622

SolarWinds N-Central 12.3.0.670 contains a Cross-Site Request Forgery (CSRF) vulnerability in the AdvancedScripts HTTP endpoint. The issue allows CSRF by remote attackers via the affected endpoint, potentially impacting confidentiality, integrity, and availability (CVSS3.1: HIGH, 8.8). The root c...

CVE-2020-25620

CVE-2020-25620 affects SolarWinds N-Central 12.3.0.670. The issue is due to hard-coded credentials for local accounts [email protected] and [email protected], which allow logins to the NAC and/or the regular web interface. The connected sources confirm the credential issue but do not provide...

CVE-2020-25617

SolarWinds N-Central 12.3.0.670 contains a relative path traversal flaw in the AdvancedScripts HTTP endpoint . An authenticated user can exploit this to execute OS commands as root via the NAC interface, as described across multiple sources (NVD/Red Hat/CNVD listings). The root cause is path trav...

CVE-2020-25618

SolarWinds N-Central 12.3.0.670 contains a sudo misconfiguration: the nable web user can effectively execute arbitrary OS commands as root because root privileges are not restricted to specific programs in the sudoers file. This impacts the product’s ability to enforce least privilege via sudo, e...

CVE-2020-15910

This CVE concerns SolarWinds N-Central, affected in version 12.3 GA and lower. The underlying issue is that the JSESSIONID cookie is not marked HttpOnly, enabling client-side scripts to influence or exfiltrate the cookie. The described impact is that an attacker could lure a user to a crafted pag...

CVE-2020-25619

CVE-2020-25619 affects SolarWinds N-Central 12.3.0.670, where the SSH component allows port forwarding to access services on 127.0.0.1 because the Communication Channel is not restricted to Intended Endpoints. This creates a local-access risk via an SSH feature intended for user-to-agent communic...

CVE-2020-25621

SolarWinds N-Central 12.3.0.670 is affected by an authentication flaw in its local database: access is permitted without authentication, relying only on network interface restrictions. The database reportedly stores keys and passwords, implying potential credential exposure if access is gained. P...

CVE-2020-15909

SolarWinds N-central up to 2020.1 is described as vulnerable to session hijacking via the JSESSIONID cookie. The JSESSIONID attribute is not validated against multiple sources (e.g., source IP, MFA claims) while the victim remains logged in, allowing an attacker to steal the cookie and reuse it b...