CVE-2020-25618

An issue was discovered in SolarWinds N-Central 12.3.0.670

published December 16, 2020

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02680 · 85.7th percentile
Published
2020-12-16T13:56Z
EPSS history
Timeline
  • 16 DEC 13:56Z
    An issue was discovered in SolarWinds N-Central 12.3.0.670
    cvelistv5