CVE-2020-25618 | BDVDB-2026-146113 Detail

Description#

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.solarwinds.com/SuccessCenter/s/
https://ernw.de/en/publications.html
https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/

Exploit#

No public exploit known

History#

Version 12020-12-16Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.