CVE Feed

    Dashboard / CVE / CVE-2020-7984

    CVE-2020-7984

    SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information. The attacker can use a customer ID to self register and read any aspects of the agent/appliance configuration.

    Published:Jan 26, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 26, 2020
    EPSS Score:0.00656
    CVSS Score:7.5

    Affected Products

    Vendor
    Solarwinds
    Product
    N-central

    Exploits

    https://blog.huntresslabs.com/validating-the-solarwinds-n-central-dumpster-diver-vulnerability-5e3a045982e5https://blog.huntresslabs.com/validating-the-solarwinds-n-central-dumpster-diver-vulnerability-5e3a045982e5

    Related CVEs

    CVE-2020-25622 (CVSS 8.8) — An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF.…
    CVE-2020-25621 (CVSS 8.4) — An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication…
    CVE-2020-25620 (CVSS 7.8) — An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local …
    CVE-2020-25619 (CVSS 4.4) — An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communicat…
    CVE-2020-25618 (CVSS 8.8) — An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access contro…
    CVE-2020-25617 (CVSS 8.8) — An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative …
    CVE-2020-15910 (CVSS 4.7) — SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes i…
    CVE-2020-15909 (CVSS 8.8) — SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access.…

    References

    https://blog.huntresslabs.com/validating-the-solarwinds-n-central-dumpster-diver-vulnerability-5e3a045982e5
    https://community.solarwindsmsp.com/Support/Software-Downloads/MSP-N-Central/MSP-N-central-12-1-SP1-HF5
    https://community.solarwindsmsp.com/Support/Software-Downloads/MSP-N-Central/MSP-N-central-12-2-SP1-HF2
    https://github.com/flipflopfpv
    https://packetstormsecurity.com/files/156033
    https://success.solarwindsmsp.com/kb/solarwinds_n-central/How-to-Expunge-credentials-for-Customer-levels-of-SolarWinds-N-central
    https://twitter.com/SecurityNewsbot/status/1219722631898812416
    https://www.crn.com/news/managed-services/solarwinds-rmm-tool-has-open-zero-day-exploit-huntress-labs
    https://blog.huntresslabs.com/validating-the-solarwinds-n-central-dumpster-diver-vulnerability-5e3a045982e5
    https://community.solarwindsmsp.com/Support/Software-Downloads/MSP-N-Central/MSP-N-central-12-1-SP1-HF5
    https://community.solarwindsmsp.com/Support/Software-Downloads/MSP-N-Central/MSP-N-central-12-2-SP1-HF2
    https://github.com/flipflopfpv
    https://packetstormsecurity.com/files/156033
    https://success.solarwindsmsp.com/kb/solarwinds_n-central/How-to-Expunge-credentials-for-Customer-levels-of-SolarWinds-N-central
    https://twitter.com/SecurityNewsbot/status/1219722631898812416
    https://www.crn.com/news/managed-services/solarwinds-rmm-tool-has-open-zero-day-exploit-huntress-labs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High