high8.8
CVE-2020-25617
An issue was discovered in SolarWinds N-Central 12.3.0.670.
Impact
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | N-Central | Version 12.3.0.670 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/